General

  • Target
    raspy.zip
  • Size 2.7MB
  • Sample261104-2faxjsvyaw
  • SHA256 b58a39d1317363ac5484efb984f6568d4d89cd9e629cf6f6f52e850c3461c5c1
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      raspy.dll
    • Size 6.9MB
    • SHA256 132577df174d025baf0a61f22f2c515a7ee349f48db3c7d260033bcdb65b46c2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      raspy.exe
    • Size 11.7MB
    • SHA256 9b4b8164285b081be18cd12ddddc57659b5d85faba5ff84d66ebfb4d144cbb29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks