General
- Target 8fcb237526b0a2d71f3d9afa057b3dc6234dae79b2af452f2e7069a1fe50ce1d
- Size 285KB
- Sample260916-sffncssaqa
- SHA256 8fcb237526b0a2d71f3d9afa057b3dc6234dae79b2af452f2e7069a1fe50ce1d
- MD5 d9f191c7485425ac2cbf25a4db93a822
- SHA1 56066a972b1e3b954a5d027ded01af17a825f01a
- SHA512 7838e51aa94bc091751271991fcf367066b635f2de3f4b1415845fb7549e0b24686ab2ce9ff52772a07f78e835169738c542561ee61f984a2947858aaf7bf198
- SSDEEP 6144:A//ICMmDpsYwfXnAgvgP5lRWK6ULGgHoHaTRNy15BV3uY1ocxv:A//kYWXAgI/RcUWaT2zBV3fdxv
- TLSH T17F5402D02C81C0BDF01A16BD6DC9E63E2C7CCA3815518986FBE0F4A59FDE6B2581C663
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 8fcb237526b0a2d71f3d9afa057b3dc6234dae79b2af452f2e7069a1fe50ce1d
- Size 285KB
- SHA256 8fcb237526b0a2d71f3d9afa057b3dc6234dae79b2af452f2e7069a1fe50ce1d
- MD5 d9f191c7485425ac2cbf25a4db93a822
- SHA1 56066a972b1e3b954a5d027ded01af17a825f01a
- SHA512 7838e51aa94bc091751271991fcf367066b635f2de3f4b1415845fb7549e0b24686ab2ce9ff52772a07f78e835169738c542561ee61f984a2947858aaf7bf198
- SSDEEP 6144:A//ICMmDpsYwfXnAgvgP5lRWK6ULGgHoHaTRNy15BV3uY1ocxv:A//kYWXAgI/RcUWaT2zBV3fdxv
- TLSH T17F5402D02C81C0BDF01A16BD6DC9E63E2C7CCA3815518986FBE0F4A59FDE6B2581C663
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1