General
-
Target
DriverEasy_Setup.exe
-
Size
5.2MB
-
Sample
230407-knk9taae41
-
MD5
bfb4c3cfd7d868058b300ffec858e7a2
-
SHA1
08b38f2082aba63160cfe1e376cb216a14269943
-
SHA256
c41067c647d5685aa0116554f0e1eb95a4a114af7046daa1ccc4561edc36483e
-
SHA512
7e1dfed4cd3957b5e5e22562ee454c117d69ef48a73996f354a1c84aad68eeb5acd2c89d7d05d1c6238fbde956c4ca96b4e92ab0ee0c8a017ddc4e9d5e8f2232
-
SSDEEP
98304:TkLQhsosOuPdJ2gyJgGaMMygX9jhU6ZbqAZO5z8ziZHxC3IpdpyttB:YesoYdcgyJBa4gX9jhLtqAY8ZIdpyttB
Static task
static1
Behavioral task
behavioral1
Sample
DriverEasy_Setup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
DriverEasy_Setup.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
DriverEasy_Setup.exe
-
Size
5.2MB
-
MD5
bfb4c3cfd7d868058b300ffec858e7a2
-
SHA1
08b38f2082aba63160cfe1e376cb216a14269943
-
SHA256
c41067c647d5685aa0116554f0e1eb95a4a114af7046daa1ccc4561edc36483e
-
SHA512
7e1dfed4cd3957b5e5e22562ee454c117d69ef48a73996f354a1c84aad68eeb5acd2c89d7d05d1c6238fbde956c4ca96b4e92ab0ee0c8a017ddc4e9d5e8f2232
-
SSDEEP
98304:TkLQhsosOuPdJ2gyJgGaMMygX9jhU6ZbqAZO5z8ziZHxC3IpdpyttB:YesoYdcgyJBa4gX9jhLtqAY8ZIdpyttB
Score8/10-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-