General

  • Target

    https://github.com/panzehirr/HWID-SPOOFER-UNDETECTED/blob/main/Hwid%20Spoofer/Loader%20Base%20Spoofe%E2%80%AEnls..scr

  • Sample

    221003-saqalsbgd3

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/panzehirr/HWID-SPOOFER-UNDETECTED/blob/main/Hwid%20Spoofer/Loader%20Base%20Spoofe%E2%80%AEnls..scr

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks