Overview

overview

7

Static

static

LUGGAGES.lnk

windows7-x64

3

LUGGAGES.lnk

windows10-2004-x64

7

PERLITIC/BURGOYNE.cmd

windows7-x64

1

PERLITIC/BURGOYNE.cmd

windows10-2004-x64

1

PERLITIC/PITCHPOT.dll

windows7-x64

3

PERLITIC/PITCHPOT.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    Scan_134_INV_01-24.zip
  • Size 518KB
  • Sample230124-yqdveade23
  • SHA256 f5498dbfd2efefc4acc9ab9773d4fcbedeffa57e5a7d5d72398b86c7af93bd20
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      LUGGAGES.LNK
    • Size 1KB
    • SHA256 77ed0dccd237b248c1ad2f0eccc4e4ac97417f6d5b1367ee489ff441d8100eca
    • MD5 SHA1 SHA512
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2
    • Target
      PERLITIC/BURGOYNE.CMD
    • Size 528B
    • SHA256 8ab55cd0615654a37d58dec772fef116884cad834618a88b1f217b1be58a7303
    • MD5 SHA1 SHA512
    Score
    1/10
    behavioral3behavioral4
    • Target
      PERLITIC/PITCHPOT.DAT
    • Size 1.0MB
    • SHA256 95ad74c1dff5293c49c955a4e77c17e6912c7b8d1fc8f5f4c6f05ac77a56a9ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    behavioral5behavioral6

MITRE ATT&CK Enterprise v6

Tasks