General

  • Target
    1bc902432f4eff68b906e751c71a993438383bdba8188941d08d048da964d892
  • Size 952KB
  • Sample260709-qlcgsabt5l
  • SHA256 1bc902432f4eff68b906e751c71a993438383bdba8188941d08d048da964d892
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      1bc902432f4eff68b906e751c71a993438383bdba8188941d08d048da964d892
    • Size 952KB
    • SHA256 1bc902432f4eff68b906e751c71a993438383bdba8188941d08d048da964d892
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks