Overview

overview

8

Static

static

setup_iggtech.com.exe

windows7-x64

8

setup_iggtech.com.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    setup_iggtech.com.exe

  • Size

    97.9MB

  • Sample

    230112-vb4whace5y

  • MD5

    798c4e41a71e09befa8fb633b154bdde

  • SHA1

    5451aa36ba5292c188eb7f11c256dc996f3f6a1f

  • SHA256

    6e9090e2d51312e27201c93ee332ea6d1aa5956b61a2402906bb83a9785c33c3

  • SHA512

    b98353e9d3036e33d3ead39978ca7c3ac046006eef610f7cd078538385cbcc429674a9f662f0f8028c55194131be527b5872b1186b59e8009239d78899337e2e

  • SSDEEP

    3145728:FVL2DGG+APG2jqlIVaUW7n6j0RTFB96XCLDq2v:3LxYtNW269

Score
8/10
discoveryevasion

Malware Config

Targets

    • Target

      setup_iggtech.com.exe

    • Size

      97.9MB

    • MD5

      798c4e41a71e09befa8fb633b154bdde

    • SHA1

      5451aa36ba5292c188eb7f11c256dc996f3f6a1f

    • SHA256

      6e9090e2d51312e27201c93ee332ea6d1aa5956b61a2402906bb83a9785c33c3

    • SHA512

      b98353e9d3036e33d3ead39978ca7c3ac046006eef610f7cd078538385cbcc429674a9f662f0f8028c55194131be527b5872b1186b59e8009239d78899337e2e

    • SSDEEP

      3145728:FVL2DGG+APG2jqlIVaUW7n6j0RTFB96XCLDq2v:3LxYtNW269

    Score
    8/10
    discoveryevasion

    • Executes dropped EXE

    • Modifies Windows Firewall

      evasion

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks