Resubmissions

06-08-2022 13:39

220806-qx5mpshfd5 10

06-08-2022 13:30

220806-qr2nvsfbcr 1

General

  • Target

    Flashpoint 10.1 Infinity.exe

  • Size

    712.3MB

  • Sample

    220806-qx5mpshfd5

  • MD5

    e6cef8f065a984eb91134bdd6b1113f4

  • SHA1

    8040355b6f3d935d9bde2dad7dd1bc0c7834c314

  • SHA256

    813a76da99ec24da6c6121e4777b973fe9545ad4c1fb26ce7040dee21686e060

  • SHA512

    ec99954157b0354b5ceb92e6698cc5a0656e016d79e1cc20b3574496ee8a21b4fbc57ae6c0b7fdab64b3cfd81b6137c952f1a2f679517247e8f49f72afb87119

Score
10/10

Malware Config

Targets

    • Target

      Flashpoint 10.1 Infinity.exe

    • Size

      712.3MB

    • MD5

      e6cef8f065a984eb91134bdd6b1113f4

    • SHA1

      8040355b6f3d935d9bde2dad7dd1bc0c7834c314

    • SHA256

      813a76da99ec24da6c6121e4777b973fe9545ad4c1fb26ce7040dee21686e060

    • SHA512

      ec99954157b0354b5ceb92e6698cc5a0656e016d79e1cc20b3574496ee8a21b4fbc57ae6c0b7fdab64b3cfd81b6137c952f1a2f679517247e8f49f72afb87119

    Score
    10/10
    • SnakeBOT

      SnakeBOT is a heavily obfuscated .NET downloader.

    • Contains SnakeBOT related strings

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks