General

  • Target
    7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
  • Size 3.4MB
  • Sample260827-tq4cvabl3s
  • SHA256 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
    • Size 3.4MB
    • SHA256 7ef6d1cf22daacfef380984e4bac796444a0169d84b9ea8d2cf87fb10f0e9010
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Creates a file in the Startup directory

      A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks