0159fc6ea1fcfa42a9c450a9cd8599443e45914be9456cd43f51c1ef9c9a4706

Sharing

Copy URL Twitter E-mail

General

Target
0159fc6ea1fcfa42a9c450a9cd8599443e45914be9456cd43f51c1ef9c9a4706
Size 1.2MB
Sample260808-xgcejssgrb
SHA256 0159fc6ea1fcfa42a9c450a9cd8599443e45914be9456cd43f51c1ef9c9a4706
MD5 553006d59af41d99dab8fd8a072ea911
SHA1 2405f02af8af2e2417e0561acaf0fd8338a569ea
SHA512 9c6dd5f7f08a4b11889452b5c595cc33da5f3b941f67acd1b4398c2ddfcee9aeb3297e1c3b783a8b75a36da828bb02cdbdd122f69edc0b843e8b6e37fe858455
SSDEEP 24576:9lVVD1pla9xE+zWm1HkXddaPQe51qEQxzlQ8H:9l7JpY4dmBkXDaPQe51qEQQ8H
TLSH
T1314533285609FD753D7030A9B5E36B75E4ED0E9C5D061BFAB6C2B3D4680A0B411A83BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution

Malware Config

Targets

- Target
  .__MACCOSX/ControlModule.dll
- Size 2.4MB
- SHA256 0efa99bc1db53f0debedc86d4ac6cb5e79d7e8a162f3acb52eba0a1b638a8a01
- MD5 dec2c4a4a3c4fc95aa99a3e688db0287
- SHA1 a98eee8940c7564d4a7f438f12f423ca7594e32c
- SHA512 f58e734bc4a8c4ef12ee8347a6357c219bb742dbc74c22381c2f1d1cb20d13db85e0cd267d45a527a89ac0c64bf885ab0a764c50a2d0fb2369c35316a71dfee6
- SSDEEP 24576:B1sN3mQ+nO4f42F+xbf0SQ+b1slSvetq/oUs7gnBN5jdPxxiTNLAZYpEVP2WbuFh:BbP8e3KHiJYYEVotVYxQghhqSI
- TLSH
  T16EC574056BF182DCC46BD774B939A2A209347C8C5528376ACFCC8F537A27311D6B8B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  .__MACCOSX/InteRunUpdateHost64.exe
- Size 398KB
- SHA256 b221b15aeecec9b1d65692f32306c4c76615d0e289bf12e431fdb2e7c14dad1b
- MD5 b997149ec015c636a7ecc93f43ff9997
- SHA1 e0080a755393254449269845072e4cdd4898c51c
- SHA512 0c12dcd375f0d36dcb7684c730f214436a68ec27be4667822c7da3386e9a868b01b0d439459fd082b119c672e4393fd48e32648fc2578d8ac94e303c281dc62f
- SSDEEP 6144:MIdiRjNVSnA0+A05fYS/zaWrmwxPtq9yRzJgqYIZ9G0cybJ10IvGXJlf/DOA0gM+:MIdiRjNVWp+d5fXaW6O3zbKDXJlfSlA1
- TLSH
  T17F84185153F84A56F5FE1B39F8B949110FFAF842A636E34F1684A8AD2D93B81DD10323
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral3 behavioral4
- Target
  .__MACCOSX/上港集团国客中心业务流程退回申请单.docx
- Size 54KB
- SHA256 be5bd4223b8107c8074114b5939002a0bc1cfb22ed00a9cc0adafd168330e688
- MD5 f9d40c78f2f69f1d20f90d3a34c4dbd1
- SHA1 f25c08451d33531b3b2fdc66229be0eb83c358dc
- SHA512 10fb87ae44294ebd70cc76e9cc091cf4918af34d14328f7142a24c7aaa8da2b94180743c3c90ece280f559ea3fecf701fbfff27786c9b95a5af2b489f122eb5b
- SSDEEP 1536:pjMdj/q29ou/vj3qCyHu9IddBcQ/NK7l+:pYhqCwu9mdj/0E
- TLSH
  T13E43F16DCDB43474D219C3B9A541166FFC7937A0E163E60AAC89E2DD44B0A3C0EA2F58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral5 behavioral6
- Target
  上港集团国客中心业务流程退回申请单.docx.lnk
- Size 522B
- SHA256 6da86bc1e82f5dfbd1a03b9ca19a6347e1970c633eb535be86d7ad2724788800
- MD5 1472c481faf892ced76616c19b687f15
- SHA1 780e47abd9fedd8c960abb4b173128098a527da5
- SHA512 be0175a2411216118849851430603004d6e5e28c73726b8d4da257ce088a563c6a2bb418448ac2135b00182a6bdd9764e0666565ce10f8856e484f5ca73d1e3f
- TLSH
  T1A3F05C042DE32F4BD6320771542F6745DA3FF9659644C30C247036446D569407194F76
- MD5 SHA1 SHA512 TLSH
Score

7^/10

execution
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks computer location settings

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8