General

  • Target
    25630307126.zip
  • Size 13.1MB
  • Sample260805-s5j23scb97
  • SHA256 462d2b649e073d4c98cc037944d19d640a0c8c6d35e08f0fea2557414eb93390
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64
    • Size 13.3MB
    • SHA256 0c09f2611660441084ce0df425c51c11e147e6447963c3690f97e0b25c55ed64
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks