557ca1d922d42c384edeb4a5a453e51ba0c8b2425d7658045388522c9f073d79

Sharing

Copy URL Twitter E-mail

General

Target
557ca1d922d42c384edeb4a5a453e51ba0c8b2425d7658045388522c9f073d79
Size 1.1MB
Sample260807-lccc7svtfs
SHA256 557ca1d922d42c384edeb4a5a453e51ba0c8b2425d7658045388522c9f073d79
MD5 a6991417aa1897d9633a9741f08053de
SHA1 2e3bf179d5a95de6ff11389be5ad400e2c44fc12
SHA512 7b81b6a61ce2d4683e414a2e5f7d8192d2d35b2cf68310b25f03f6ee954d2d984ae4360db4376038dc50b5c316fa0a8e1dca83bc82f8eff3af72711fe6be809c
SSDEEP 24576:5BT8HbDVcUycQtQhGGx7YBUjQ6z9qSqDrOz9:5BodZXxMBUjQ6z9qSqY
TLSH
T19A452308768B3871A9107BF36E6B162ED9DA497DAF472E372F4F12C474AD0E51321283
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  .__MACCOSX/8月消防检查联系对接人.xls
- Size 23KB
- SHA256 b6dc5842a65016bd4bd03510364e59981a7c188e907f95a040d4eafa9b37a3c4
- MD5 0a1ec794590975bf9c97675a9e26cc9c
- SHA1 44d9d492a5ebb435b0a073200a0cae070854d248
- SHA512 c844fb28e4cc7851bf65350a7c94d76493351cd16d68cd8fd148cb43ba81c777759496b212845f57699b3a916f83a4a25a8cea8679bfb5354d3b84abc198b2ca
- SSDEEP 384:ICCCMRTbQeoPE8lSKI0fXb4RzVsMVVwRUOLhhEKGGoLVh/sRo6bGhuDat5RmCxf3:ICCCMRTbQeoPE8lSKI0fXb4RzuDat5RK
- TLSH
  T172B25156F6D78C84CA1A4336E2D797167333BC014B73470B3A98F3476AB5AC09A47A1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  .__MACCOSX/ControlModule.dll
- Size 2.5MB
- SHA256 525b93a1d163cf0046c0eff2b72d777faa4f8071f7fed87f70cd75785c6b6821
- MD5 8d5366109181d4ac4eae7a864134fd23
- SHA1 f05788b2b5acc7d0a18319a78df7264763a282c9
- SHA512 c2e1b3efa4b60044ca6483d17c84b539ab7ec0cab5e278c7b9ac8853e4492361685cdd941f4ef12cc40569fcdaec279207e37a8fb62d0a6d24c17532b999db92
- SSDEEP 24576:Q5I2Gx1YxtaFSTybuNHvrsUhFi8h+nDunz7PBD15nzR7H6rmUTHv7sxQghhqSID:2GqtG7DulBaHHjsxQghhqSI
- TLSH
  T112C583066BF182DCD46BD3B8B935A2A209347D8C5118376ACBCCCF537A1731196F8B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  .__MACCOSX/InteRunUpdataHost64.exe
- Size 398KB
- SHA256 b221b15aeecec9b1d65692f32306c4c76615d0e289bf12e431fdb2e7c14dad1b
- MD5 b997149ec015c636a7ecc93f43ff9997
- SHA1 e0080a755393254449269845072e4cdd4898c51c
- SHA512 0c12dcd375f0d36dcb7684c730f214436a68ec27be4667822c7da3386e9a868b01b0d439459fd082b119c672e4393fd48e32648fc2578d8ac94e303c281dc62f
- SSDEEP 6144:MIdiRjNVSnA0+A05fYS/zaWrmwxPtq9yRzJgqYIZ9G0cybJ10IvGXJlf/DOA0gM+:MIdiRjNVWp+d5fXaW6O3zbKDXJlfSlA1
- TLSH
  T17F84185153F84A56F5FE1B39F8B949110FFAF842A636E34F1684A8AD2D93B81DD10323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral5 behavioral6
- Target
  8月消防检查联系对接人.xls.lnk
- Size 520B
- SHA256 b1aaf3a65b56a7918fa68642055245df98bcabaef533bb035da5e04a65b5e682
- MD5 a32e52e4f779984ef2add6aaf7ac28ab
- SHA1 3594df99f4a97747e3f4b73c889e8398ac162c0a
- SHA512 81b7c75a4bc6d44c608ffc9d29b26150bc3e5e75293f26941e2dc523a5003de971682407f46de973c2f1580e429ade2b1e7e2156e616e93f5e2a31ca06603d55
- TLSH
  T10FF05C0439D20B8ADA715BB1682BA755E93BB4588D55C34C246032487C559807164F76
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8