General

  • Target
    Notice from Tax Departmen.img
  • Size 1.2MB
  • Sample260729-s2w78sag44
  • SHA256 69a0923cfc9bd24a01a6a6047c84d06778f04910647d52005a88b6c9da9df288
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2026 Statement of Account.exe
    • Size 25KB
    • SHA256 de0b9b6656c9e9fc9db4271610a09c2ae27d07c5a4757e94b2e0314a9dda6ee4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Target
      winhttp.dll
    • Size 259KB
    • SHA256 9be874621f2d3124feb1b8a50e8c032b064fad52466eaa8af52fd767076f2139
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks