Overview

overview

8

Static

static

Buff Achie...er.exe

windows7-x64

8

Buff Achie...er.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Buff Achievement Tracker - Installer.exe

  • Size

    2.0MB

  • Sample

    230131-j9m5vsff34

  • MD5

    f0563d7d840cddd6676798caafd9f8c8

  • SHA1

    a249cfb7ee3ced529564e5b2fdc95e0270e20a17

  • SHA256

    7505bf2aae7f80608b9621b4ee1f6e2710b72f1be05767765d2d806258e9d543

  • SHA512

    f56d7a9d1ec90053e33ffa93c65aaa30fced6eb0151b4038c554bd7bf5e66a58b1780f396e6fe4c3aa96de85301b1610e4fa58f2f35941f0fa057d5b108f2a53

  • SSDEEP

    49152:AG0R2HxY4ExpsrFpIvDlAVMDdsCYBERUcQ:AG0uE+TIvDVduOCh

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Buff Achievement Tracker - Installer.exe

    • Size

      2.0MB

    • MD5

      f0563d7d840cddd6676798caafd9f8c8

    • SHA1

      a249cfb7ee3ced529564e5b2fdc95e0270e20a17

    • SHA256

      7505bf2aae7f80608b9621b4ee1f6e2710b72f1be05767765d2d806258e9d543

    • SHA512

      f56d7a9d1ec90053e33ffa93c65aaa30fced6eb0151b4038c554bd7bf5e66a58b1780f396e6fe4c3aa96de85301b1610e4fa58f2f35941f0fa057d5b108f2a53

    • SSDEEP

      49152:AG0R2HxY4ExpsrFpIvDlAVMDdsCYBERUcQ:AG0uE+TIvDVduOCh

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Registers COM server for autorun

      persistence

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks