General

  • Target

    AnimazeLauncherInstaller.exe

  • Size

    91.9MB

  • Sample

    230503-czb7aafc2y

  • MD5

    0f0a207e92a54e0a718f298465d8518d

  • SHA1

    14c9bc17211a725e7842cd52a79989c242705f04

  • SHA256

    fb21209e97f0ab5a1a167a563ebed3e9771336a883336c8209128fec2bf65257

  • SHA512

    448341e1ee2415860246e562a76b9a9e9448f2e13bcbae05683acdcab5bf38d3c16e4cd095aa0bba6914c1665569442149e29f22f3c58518ce08c71d185003fb

  • SSDEEP

    1572864:suqLCD0KligXe4tDYwZBqq6AxsB1wixsyb0mZ2ESYdQvltt7H0Spo65QZb9Qx2pD:spLC0Ie41YiB7c1wixHbh2Ejo7USpb5q

Malware Config

Targets

    • Target

      AnimazeLauncherInstaller.exe

    • Size

      91.9MB

    • MD5

      0f0a207e92a54e0a718f298465d8518d

    • SHA1

      14c9bc17211a725e7842cd52a79989c242705f04

    • SHA256

      fb21209e97f0ab5a1a167a563ebed3e9771336a883336c8209128fec2bf65257

    • SHA512

      448341e1ee2415860246e562a76b9a9e9448f2e13bcbae05683acdcab5bf38d3c16e4cd095aa0bba6914c1665569442149e29f22f3c58518ce08c71d185003fb

    • SSDEEP

      1572864:suqLCD0KligXe4tDYwZBqq6AxsB1wixsyb0mZ2ESYdQvltt7H0Spo65QZb9Qx2pD:spLC0Ie41YiB7c1wixHbh2Ejo7USpb5q

    • Blocklisted process makes network request

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks