General

  • Target

    Acrobat_DC_Set-Up.exe

  • Size

    2.3MB

  • Sample

    220518-2plqeahgfk

  • MD5

    d5a162f784db24f8692722b82187f3b9

  • SHA1

    5fdf0ce799c4ffd997a134e8e1b7cd6ba0e1789c

  • SHA256

    f1d2317c494b70871d53921e55d876d4a15dffc9d709d0ac9d0c01a922952a87

  • SHA512

    63d313dda933fda564c6b17292b4424a58ddcbd89f7feca77abb4b7b5b3d24d38d8e58e11e1bd6f9a5320e6346dda1a2ec48b85312d5ece419d6153b394ba303

Score
10/10

Malware Config

Targets

    • Target

      Acrobat_DC_Set-Up.exe

    • Size

      2.3MB

    • MD5

      d5a162f784db24f8692722b82187f3b9

    • SHA1

      5fdf0ce799c4ffd997a134e8e1b7cd6ba0e1789c

    • SHA256

      f1d2317c494b70871d53921e55d876d4a15dffc9d709d0ac9d0c01a922952a87

    • SHA512

      63d313dda933fda564c6b17292b4424a58ddcbd89f7feca77abb4b7b5b3d24d38d8e58e11e1bd6f9a5320e6346dda1a2ec48b85312d5ece419d6153b394ba303

    Score
    10/10
    • Detected adobe phishing page

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    • Target

      out.upx

    • Size

      6.8MB

    • MD5

      59a02ed3469f95c0b94a2bf93c8b4e04

    • SHA1

      ebd3b5cdd424624860a6254bc7cf6f8512e12444

    • SHA256

      d2578db87b7b5e91243547956403693231d68836f74c51d31729a3ea6f87564b

    • SHA512

      843c76031a25f369dc93dcfaab5213e935296f51ff150863bb5bbad105404b4c3f1f41a1602718d63338d70258dd55a21bd5d4f41b7840f777d6ebcf8ba76d66

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

3
T1082

Tasks