General

  • Target

    Postman-win64-Setup.exe

  • Size

    146.8MB

  • Sample

    221027-lz9xzsbgc8

  • MD5

    f547ce65e9124da706dd918da769af60

  • SHA1

    71ae19843de2d5563e96a3a031b05d132b2a3109

  • SHA256

    aeb60f26cfbe23cd23586219a445f030ec3bc989993d9d4b0dd9110319d5d966

  • SHA512

    3d4f81265a087281be6919700e03aeeef3ca4b8c411728e8dba31f5394c08600677badb77f0baa4607ef5deb079c4442bcc72a9e956ee7f16a03f57b07cc49ef

  • SSDEEP

    3145728:TmxSGbzLnsCBxjzZqYZTE8hTCmwGldB7ux0Yie9RD773V5z+dwLl:aLsoNZZZTFTCQldB7Y0Nen/Fppp

Score
8/10

Malware Config

Targets

    • Target

      Postman-win64-Setup.exe

    • Size

      146.8MB

    • MD5

      f547ce65e9124da706dd918da769af60

    • SHA1

      71ae19843de2d5563e96a3a031b05d132b2a3109

    • SHA256

      aeb60f26cfbe23cd23586219a445f030ec3bc989993d9d4b0dd9110319d5d966

    • SHA512

      3d4f81265a087281be6919700e03aeeef3ca4b8c411728e8dba31f5394c08600677badb77f0baa4607ef5deb079c4442bcc72a9e956ee7f16a03f57b07cc49ef

    • SSDEEP

      3145728:TmxSGbzLnsCBxjzZqYZTE8hTCmwGldB7ux0Yie9RD773V5z+dwLl:aLsoNZZZTFTCQldB7Y0Nen/Fppp

    Score
    8/10
    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks