General

  • Target
    a4fee95648b1d3fb103118ac4552f8f0eb2b4c428e387655b690a107311cd27f
  • Size 1.9MB
  • Sample260813-ss3zesbp5t
  • SHA256 a4fee95648b1d3fb103118ac4552f8f0eb2b4c428e387655b690a107311cd27f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ENQUIRY - E602.JS
    • Size 4.0MB
    • SHA256 e19b0832f7f3b77fb7b3ddacd1da8cfaf1e64970e8f8505e35026ac48e62f730
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks