General

  • Target

    PicoTorrent-0.25.0-x64.exe

  • Size

    5.7MB

  • Sample

    230204-r5v9nsgh6y

  • MD5

    d665e9afbe4d8aac93ed80e3d9167ab5

  • SHA1

    732e0fc16a7212535e9b8ae241186efc8839680f

  • SHA256

    3b034ac4eff0fc296634c27c8b41b2629d57284a4bb1e366150fd04cfa23d801

  • SHA512

    30f66bb0799c7ddd09c8a609add6496cf454f57bc94a911cf44fb78a073d2518e6088c888c143fa98172c4a0bf66e78ee588a74d84c3fb859603b6923291ae01

  • SSDEEP

    98304:uT0ap+fVbw3/89LT477CFoQFYS5qgqGU0yJIlr+oV+gMu4MfRcIMf:uTl+fV8v89L+CDTqeprfVku4MfRcIW

Score
7/10

Malware Config

Targets

    • Target

      PicoTorrent-0.25.0-x64.exe

    • Size

      5.7MB

    • MD5

      d665e9afbe4d8aac93ed80e3d9167ab5

    • SHA1

      732e0fc16a7212535e9b8ae241186efc8839680f

    • SHA256

      3b034ac4eff0fc296634c27c8b41b2629d57284a4bb1e366150fd04cfa23d801

    • SHA512

      30f66bb0799c7ddd09c8a609add6496cf454f57bc94a911cf44fb78a073d2518e6088c888c143fa98172c4a0bf66e78ee588a74d84c3fb859603b6923291ae01

    • SSDEEP

      98304:uT0ap+fVbw3/89LT477CFoQFYS5qgqGU0yJIlr+oV+gMu4MfRcIMf:uTl+fV8v89L+CDTqeprfVku4MfRcIW

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks