Overview

overview

8

Static

static

1

MSPCManagerSetup.exe

windows10-1703-x64

8

MSPCManagerSetup.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    MSPCManagerSetup.exe

  • Size

    3.9MB

  • Sample

    230402-mxr5tshc3t

  • MD5

    efba30ac0e7c539322637e909d83dd97

  • SHA1

    3c6919ea8e91cc3facf9e27b7e4ddee73ec87b80

  • SHA256

    61c8a7b449e869ac476df8ce7eaed32094e5abc6c85dd0c70c29215bddbdae7d

  • SHA512

    e5e3f89a7b0f90f12beca3707e78db62e6afc49da33c7364e2497689fdc916b1f0fbfcf23ea9bf766ac3224de1711644fe110fe3d7cc695fe68a6f3d15fec61f

  • SSDEEP

    98304:vbBBrEuBjExELKPKCGGkkZG9gDTOuQp1zQVhO++FjuXlxOVK:vrEuoAbGkGG98auQMhf0uGE

Score
8/10
persistence

Malware Config

Targets

    • Target

      MSPCManagerSetup.exe

    • Size

      3.9MB

    • MD5

      efba30ac0e7c539322637e909d83dd97

    • SHA1

      3c6919ea8e91cc3facf9e27b7e4ddee73ec87b80

    • SHA256

      61c8a7b449e869ac476df8ce7eaed32094e5abc6c85dd0c70c29215bddbdae7d

    • SHA512

      e5e3f89a7b0f90f12beca3707e78db62e6afc49da33c7364e2497689fdc916b1f0fbfcf23ea9bf766ac3224de1711644fe110fe3d7cc695fe68a6f3d15fec61f

    • SSDEEP

      98304:vbBBrEuBjExELKPKCGGkkZG9gDTOuQp1zQVhO++FjuXlxOVK:vrEuoAbGkGG98auQMhf0uGE

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Sets file execution options in registry

      persistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks