Overview

overview

8

Static

static

MouseKeybo...41.exe

windows7-x64

MouseKeybo...41.exe

windows10-2004-x64

Resubmissions

02/01/2023, 18:57

230102-xl1b6sfd79 1

02/01/2023, 18:51

230102-xhm8fafd24 8

Sharing

Copy URL Twitter E-mail

General

  • Target

    MouseKeyboardCenter_64bit_ENG_14.41.exe

  • Size

    47.3MB

  • Sample

    230102-xhm8fafd24

  • MD5

    581de3f046339e0731d52216f9780342

  • SHA1

    7e3cd381fc8465927ab558a902d47c6420bb78d6

  • SHA256

    b847e5f5a2aa770572009a0b0dd15d8d811226843a0b3b9a4216c3d05d432ad2

  • SHA512

    a2523fec5885da742ca87dcde0b50fc4270f3cfdef5eb992802c64ccc2f952edb934d8b3b7d2e646e8af45d0f57bfc305f911d302f1e60df2a7121a450122998

  • SSDEEP

    786432:tX+6r/Z4VywOz8xBEyooD2jgryI+O8fxEyvDMXF/EfFdvg3QpAbr/ejQ5wcd8n:tXbyVyKEyisryI3UmmDM9cdvcQiwQ5w/

Score
8/10
persistence

Malware Config

Targets

    • Target

      MouseKeyboardCenter_64bit_ENG_14.41.exe

    • Size

      47.3MB

    • MD5

      581de3f046339e0731d52216f9780342

    • SHA1

      7e3cd381fc8465927ab558a902d47c6420bb78d6

    • SHA256

      b847e5f5a2aa770572009a0b0dd15d8d811226843a0b3b9a4216c3d05d432ad2

    • SHA512

      a2523fec5885da742ca87dcde0b50fc4270f3cfdef5eb992802c64ccc2f952edb934d8b3b7d2e646e8af45d0f57bfc305f911d302f1e60df2a7121a450122998

    • SSDEEP

      786432:tX+6r/Z4VywOz8xBEyooD2jgryI+O8fxEyvDMXF/EfFdvg3QpAbr/ejQ5wcd8n:tXbyVyKEyisryI3UmmDM9cdvcQiwQ5w/

    Score
    8/10
    persistence

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks