General

  • Target
    h5pk43w5t9fvorgk.exe
  • Size 847KB
  • Sample260819-nkejmsvtht
  • SHA256 135394c23beda135582605e70019fa7d4db06b8148100aaded0027ec0d6fd21f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      h5pk43w5t9fvorgk.exe
    • Size 847KB
    • SHA256 135394c23beda135582605e70019fa7d4db06b8148100aaded0027ec0d6fd21f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks