General

  • Target

    Mechvibes.Setup.2.3.0.exe

  • Size

    61.7MB

  • Sample

    230331-zmrgrsef8y

  • MD5

    4a43aeaa5396c88362598883879ba083

  • SHA1

    d17edb9a8d878c517923bcb9385c3c79dbae4823

  • SHA256

    79ce201dd4134cd866038cbc78f9a5758e2f3fcc672b915dd50028ac4e1d3b77

  • SHA512

    59a544304e1027eb1eb16284c6a58d1431720d306f25b2c39ffb406cbd9c2404878b08ce33d56463d0e5fc40b3c998d5d0db241875652c1fb071376ca721fe32

  • SSDEEP

    1572864:1ab4n3FgfVf8VEx66sM9lqbtReXUq4ndx+55D+UVdH:1N3FceEQ6s+QReXUHdx+5xZH

Malware Config

Targets

    • Target

      Mechvibes.Setup.2.3.0.exe

    • Size

      61.7MB

    • MD5

      4a43aeaa5396c88362598883879ba083

    • SHA1

      d17edb9a8d878c517923bcb9385c3c79dbae4823

    • SHA256

      79ce201dd4134cd866038cbc78f9a5758e2f3fcc672b915dd50028ac4e1d3b77

    • SHA512

      59a544304e1027eb1eb16284c6a58d1431720d306f25b2c39ffb406cbd9c2404878b08ce33d56463d0e5fc40b3c998d5d0db241875652c1fb071376ca721fe32

    • SSDEEP

      1572864:1ab4n3FgfVf8VEx66sM9lqbtReXUq4ndx+55D+UVdH:1N3FceEQ6s+QReXUHdx+5xZH

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks