General

  • Target

    Feather Launcher Setup 1.3.6.exe

  • Size

    99.5MB

  • Sample

    230131-s3q3lsgh73

  • MD5

    defa7199048743c82fba9e765bdce034

  • SHA1

    fc448aecad6b2d1ae140e05a24844d1647403111

  • SHA256

    606f8db3ecc820d947b2cc2ea9d2048ed26aca40dbef008f7cc38548dc915e5c

  • SHA512

    015700e3e5c3aa20dc6cd134de0290cd3da9bb01dd29fd112d1c3fc460611a1acc50bbbd385d8838bcef299daf9784f876a34276005e7b2f536ba2692276309a

  • SSDEEP

    3145728:xBFkGDvcGa5cXZp2UlOajFq8orFO7Ahhq60XYJMP2ZD:L/vcGa5C20OaR57Ahh9mxeD

Malware Config

Targets

    • Target

      Feather Launcher Setup 1.3.6.exe

    • Size

      99.5MB

    • MD5

      defa7199048743c82fba9e765bdce034

    • SHA1

      fc448aecad6b2d1ae140e05a24844d1647403111

    • SHA256

      606f8db3ecc820d947b2cc2ea9d2048ed26aca40dbef008f7cc38548dc915e5c

    • SHA512

      015700e3e5c3aa20dc6cd134de0290cd3da9bb01dd29fd112d1c3fc460611a1acc50bbbd385d8838bcef299daf9784f876a34276005e7b2f536ba2692276309a

    • SSDEEP

      3145728:xBFkGDvcGa5cXZp2UlOajFq8orFO7Ahhq60XYJMP2ZD:L/vcGa5C20OaR57Ahh9mxeD

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks