General

  • Target
    e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
  • Size 3.2MB
  • Sample260714-mkcjlsdt3w
  • SHA256 e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
    • Size 3.2MB
    • SHA256 e8dd8d5a84cf439d3221be67d490e8c038f6c676a5be49acbe676950f7c02fdc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops startup file

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks