General
- Target 37bbebc2964c39066bc38feb1866edbed0c3f04a873482fd3744da496050f94c
- Size 1.5MB
- Sample260910-qqpynscq5s
- SHA256 37bbebc2964c39066bc38feb1866edbed0c3f04a873482fd3744da496050f94c
- MD5 8c44ecf8d1cc9ace3cd0c475a42031d9
- SHA1 93cab67e5c9ffc5e81e280563f1f3edc50c40b13
- SHA512 983cdde9f600df4e8b76eb513f474ee90a7c5df8a57ca7d60021ff8d8bb108931a724a2f55a168c80b21d95fea976395e749b62d9d564fc9def6e492539838da
- SSDEEP 49152:o/TWHiafSs1vbrhHCOVgRAMiCExDk4ahso:eTIiafSmvbvKi3Jkp
- TLSH T1CC7533943FD5D42DC5C4A078F2045931A5F8F639087A8AC2FAC0EEA5DFCA5B6C529E13
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 37bbebc2964c39066bc38feb1866edbed0c3f04a873482fd3744da496050f94c
- Size 1.5MB
- SHA256 37bbebc2964c39066bc38feb1866edbed0c3f04a873482fd3744da496050f94c
- MD5 8c44ecf8d1cc9ace3cd0c475a42031d9
- SHA1 93cab67e5c9ffc5e81e280563f1f3edc50c40b13
- SHA512 983cdde9f600df4e8b76eb513f474ee90a7c5df8a57ca7d60021ff8d8bb108931a724a2f55a168c80b21d95fea976395e749b62d9d564fc9def6e492539838da
- SSDEEP 49152:o/TWHiafSs1vbrhHCOVgRAMiCExDk4ahso:eTIiafSmvbvKi3Jkp
- TLSH T1CC7533943FD5D42DC5C4A078F2045931A5F8F639087A8AC2FAC0EEA5DFCA5B6C529E13
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1