General

  • Target
    c4932c0133d5372f8b4236a08eeedbb0348deddf4062c5c247344f54a205e2ca
  • Size 3.8MB
  • Sample260826-d4ezeayvc1
  • SHA256 c4932c0133d5372f8b4236a08eeedbb0348deddf4062c5c247344f54a205e2ca
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      c4932c0133d5372f8b4236a08eeedbb0348deddf4062c5c247344f54a205e2ca
    • Size 3.8MB
    • SHA256 c4932c0133d5372f8b4236a08eeedbb0348deddf4062c5c247344f54a205e2ca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies RDP port number used by Windows

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v16

Tasks