General

  • Target

    Feather Launcher Setup 1.4.8.exe

  • Size

    106.7MB

  • Sample

    230331-zrqq2add38

  • MD5

    4234902e03d0de35cfdf2e325804a4b0

  • SHA1

    e339fc0e19bbc25c5e9c32b5dbaee48b54c92f2b

  • SHA256

    cc142d1cb00c0abe5496a32ecc5591533a5a0e4dd0f743bb0c9e5402e8bfa38e

  • SHA512

    a20d6715d3a481aed61710bd43d2ce62a872f672d3a93bbbe0954e7d91d0247c046081e218dee3699cb660a0baca663147d8f78c45f1a9404bf7932668752366

  • SSDEEP

    3145728:SrQEzgfHUoBz+GBTRJmgm0IDdFO7Ahhq60XYJMP2Zo:nwAzlggmty7Ahh9mxeo

Malware Config

Targets

    • Target

      Feather Launcher Setup 1.4.8.exe

    • Size

      106.7MB

    • MD5

      4234902e03d0de35cfdf2e325804a4b0

    • SHA1

      e339fc0e19bbc25c5e9c32b5dbaee48b54c92f2b

    • SHA256

      cc142d1cb00c0abe5496a32ecc5591533a5a0e4dd0f743bb0c9e5402e8bfa38e

    • SHA512

      a20d6715d3a481aed61710bd43d2ce62a872f672d3a93bbbe0954e7d91d0247c046081e218dee3699cb660a0baca663147d8f78c45f1a9404bf7932668752366

    • SSDEEP

      3145728:SrQEzgfHUoBz+GBTRJmgm0IDdFO7Ahhq60XYJMP2Zo:nwAzlggmty7Ahh9mxeo

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

4
T1012

System Information Discovery

4
T1082

Peripheral Device Discovery

2
T1120

Tasks