General

  • Target
    0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
  • Size 22KB
  • Sample260831-pc72nagc29
  • SHA256 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
    • Size 22KB
    • SHA256 0c16b991cbf2a57f63d8aec58c96f0aadc6af16592fcef5a9d78c49dda216587
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks