General

  • Target

    SpecialUninstaller_setup.exe

  • Size

    4.5MB

  • Sample

    230511-swwphsec27

  • MD5

    675380d2a3d19ba1de3fa60140e0bfca

  • SHA1

    06356f69b6af5e7996abfcb3d959e96ddcac9df9

  • SHA256

    37de364306707098951e1119098fd54dd8e0f10ba945512ec855a5ac6417fad8

  • SHA512

    8dc80c9f5fc8455ea90bab4280ace20731e856169a8a1b3d14bad257abb7e29bc1fe11cc6bf310c5e79d2abb4983a3c014b5cd6316929cdd739d1a6672faa799

  • SSDEEP

    49152:wM0TLqCV38viVVcxKCH5PPrcprqKFL39Fz3GffPr5Lv3Fz0fd7aM+MVSo6LsR6+3:YJsAqpPrcFz9Af1v3SoMEnsR6ikZ/kz7

Score
7/10

Malware Config

Targets

    • Target

      SpecialUninstaller_setup.exe

    • Size

      4.5MB

    • MD5

      675380d2a3d19ba1de3fa60140e0bfca

    • SHA1

      06356f69b6af5e7996abfcb3d959e96ddcac9df9

    • SHA256

      37de364306707098951e1119098fd54dd8e0f10ba945512ec855a5ac6417fad8

    • SHA512

      8dc80c9f5fc8455ea90bab4280ace20731e856169a8a1b3d14bad257abb7e29bc1fe11cc6bf310c5e79d2abb4983a3c014b5cd6316929cdd739d1a6672faa799

    • SSDEEP

      49152:wM0TLqCV38viVVcxKCH5PPrcprqKFL39Fz3GffPr5Lv3Fz0fd7aM+MVSo6LsR6+3:YJsAqpPrcFz9Af1v3SoMEnsR6ikZ/kz7

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks