General
- Target 0106c734987f27128f6bb637b5c3f7bd239afa0d5a11747b137181bae8d17bfc
- Size 283KB
- Sample260916-v4vtastbme
- SHA256 0106c734987f27128f6bb637b5c3f7bd239afa0d5a11747b137181bae8d17bfc
- MD5 0c6cbfe9caeac09dd6052663ccbacd10
- SHA1 b08f0b155cce73572787fefc19cb2e1d595fe383
- SHA512 699036b15a8f141bd17d33c0d6a390554b5c978e306991954f3e6e7018e75c24bd520e9e6ec9af7561a38781b21bb6e657417bfd8cd7b5942686b36243650d98
- SSDEEP 6144:A//ICMmDpsYwWJ9uPa3Z+/C4N2aFjsft9HFlo8t5wGlJ6H:A//kYXAfcadsV/K8t5ri
- TLSH T1EF5412603C85C47ED82B117B56CEABB56978EE3011114E83DFC4EA659F882F1B61C6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Malware Config
Targets
-
- Target 0106c734987f27128f6bb637b5c3f7bd239afa0d5a11747b137181bae8d17bfc
- Size 283KB
- SHA256 0106c734987f27128f6bb637b5c3f7bd239afa0d5a11747b137181bae8d17bfc
- MD5 0c6cbfe9caeac09dd6052663ccbacd10
- SHA1 b08f0b155cce73572787fefc19cb2e1d595fe383
- SHA512 699036b15a8f141bd17d33c0d6a390554b5c978e306991954f3e6e7018e75c24bd520e9e6ec9af7561a38781b21bb6e657417bfd8cd7b5942686b36243650d98
- SSDEEP 6144:A//ICMmDpsYwWJ9uPa3Z+/C4N2aFjsft9HFlo8t5wGlJ6H:A//kYXAfcadsV/K8t5ri
- TLSH T1EF5412603C85C47ED82B117B56CEABB56978EE3011114E83DFC4EA659F882F1B61C6B3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1