General

  • Target

    Plantas vs Zombies(TutosProHD).rar

  • Size

    37.8MB

  • Sample

    230419-eyqpdsgc23

  • MD5

    fe9d1a3a2c152380b8222cff984f5fab

  • SHA1

    8c39bbabf93521e3d45c706034729a88c5def312

  • SHA256

    c0228706952db8178701abd4a3c69b12cd21334c1db722b5a9408b723d546513

  • SHA512

    76bb1e2e0c2a275733044e17ff1559fccaf4eeeda57625f90abd20adbbea29295d0911f809623d6f1965783c24e12265f141c8d03a84660c2dfe0f730960e5be

  • SSDEEP

    786432:sXKc/T/EwtTC+42BJsFE+6Z379p4HOdln7lP3QbktaRNBTCS9AwBip4g4Iu3dEV1:sXbT/E4+YOFQZ33X3B3no9fBpgQC3l

Malware Config

Targets

    • Target

      Plantas vs Zombies(TutosProHD).rar

    • Size

      37.8MB

    • MD5

      fe9d1a3a2c152380b8222cff984f5fab

    • SHA1

      8c39bbabf93521e3d45c706034729a88c5def312

    • SHA256

      c0228706952db8178701abd4a3c69b12cd21334c1db722b5a9408b723d546513

    • SHA512

      76bb1e2e0c2a275733044e17ff1559fccaf4eeeda57625f90abd20adbbea29295d0911f809623d6f1965783c24e12265f141c8d03a84660c2dfe0f730960e5be

    • SSDEEP

      786432:sXKc/T/EwtTC+42BJsFE+6Z379p4HOdln7lP3QbktaRNBTCS9AwBip4g4Iu3dEV1:sXbT/E4+YOFQZ33X3B3no9fBpgQC3l

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks