General

  • Target
    cherry.zip
  • Size 32.2MB
  • Sample260729-sdj8rsysgs
  • SHA256 f59bba2d35b0d3b4bdef5c5035f1ccd74fe68b3a6205472523483f2f33165f5a
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      cherry901.exe
    • Size 86.1MB
    • SHA256 d28f3adea94689917a296d1354ba0c51b756c8ffa1e9fbad213ecff471380fa2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v16

Tasks