General
- Target 27bc6307ccf506a848a2d372e163811c98cf9491d9da6eb83fee2a2b033c8e0e
- Size 2.0MB
- Sample260910-mg6y2sar7s
- SHA256 27bc6307ccf506a848a2d372e163811c98cf9491d9da6eb83fee2a2b033c8e0e
- MD5 516bdf9d8da613ddc7f6154730f5b6d0
- SHA1 c4acebfb9ecb221dbba991defa93fc2ab7ebebac
- SHA512 1c858903d6355e9336f089fcf7b6fbbe8588e2d168b271c2652c4598190dcaba788a8d48ac0c2eaca03835133e825a5994da16b32bcf06e2a91780c78bbde002
- SSDEEP 49152:oGahvVaA0nCeIDHIm3v3uQfTcQ7wgYnSeG4q2mYrxQ+Rg:Rah8PnmDHI6vuQfA3gYGKQ+Rg
- TLSH T170A533552713ED78D209747AE5496BBC7A24EA2D80464CCAFB83E4C09FBD192F44C277
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 27bc6307ccf506a848a2d372e163811c98cf9491d9da6eb83fee2a2b033c8e0e
- Size 2.0MB
- SHA256 27bc6307ccf506a848a2d372e163811c98cf9491d9da6eb83fee2a2b033c8e0e
- MD5 516bdf9d8da613ddc7f6154730f5b6d0
- SHA1 c4acebfb9ecb221dbba991defa93fc2ab7ebebac
- SHA512 1c858903d6355e9336f089fcf7b6fbbe8588e2d168b271c2652c4598190dcaba788a8d48ac0c2eaca03835133e825a5994da16b32bcf06e2a91780c78bbde002
- SSDEEP 49152:oGahvVaA0nCeIDHIm3v3uQfTcQ7wgYnSeG4q2mYrxQ+Rg:Rah8PnmDHI6vuQfA3gYGKQ+Rg
- TLSH T170A533552713ED78D209747AE5496BBC7A24EA2D80464CCAFB83E4C09FBD192F44C277
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1