General
- Target wp10206633-white-macbook-wallpapers.jpg
- Size 215KB
- Sample260925-yc91pavfrf
- SHA256 bede616f7161b9f75facff040696c353be0451031d40f9d63258b01e06693660
- MD5 23d7b8aee9512ccc5007efb1de957c32
- SHA1 0b46017677f8840c69178ecb5a219128aaef373c
- SHA512 b63e74ea17de052351a1ca55b6176acc3187673575bef2b80d18201ce659e2f09e5767b4ce9a6092aefe6ceba3e6c78010f0bb9bfe6f05b6f49057b5156d579a
- SSDEEP 6144:bLKHmjGObg205OKeR1MjXNOEf3wxRm44ik:1OOGjZt44ik
- TLSH T11A2412B122E880E3EC7245F2DAE35347B4AFCABD27D4FA45E4415A187F85D446CAB1B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Targets
-
- Target wp10206633-white-macbook-wallpapers.jpg
- Size 215KB
- SHA256 bede616f7161b9f75facff040696c353be0451031d40f9d63258b01e06693660
- MD5 23d7b8aee9512ccc5007efb1de957c32
- SHA1 0b46017677f8840c69178ecb5a219128aaef373c
- SHA512 b63e74ea17de052351a1ca55b6176acc3187673575bef2b80d18201ce659e2f09e5767b4ce9a6092aefe6ceba3e6c78010f0bb9bfe6f05b6f49057b5156d579a
- SSDEEP 6144:bLKHmjGObg205OKeR1MjXNOEf3wxRm44ik:1OOGjZt44ik
- TLSH T11A2412B122E880E3EC7245F2DAE35347B4AFCABD27D4FA45E4415A187F85D446CAB1B0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1