hxxps://mega[.]nz/folder/jqImgZKC#WrbsAcCCGuX2neEjGveXQQ/file/jrokGCba

Resubmissions

20-05-2023 15:16

230520-snnc6sda56 6

20-05-2023 14:43

230520-r3yl1scg66 8

Sharing

Copy URL

Twitter E-mail

General

Target

https://mega.nz/folder/jqImgZKC#WrbsAcCCGuX2neEjGveXQQ/file/jrokGCba
Sample

230520-r3yl1scg66

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  https://mega.nz/folder/jqImgZKC#WrbsAcCCGuX2neEjGveXQQ/file/jrokGCba
Score

8^/10

discovery persistence
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Modifies file permissions
  discovery
- Modifies system executable filetype association
  persistence
- Registers COM server for autorun
  persistence
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Change Default File Association

T1042

Registry Run Keys / Startup Folder

T1060

Privilege Escalation

Defense Evasion

File and Directory Permissions Modification

T1222

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Modifies file permissions

Modifies system executable filetype association

Registers COM server for autorun

Checks installed software on the system

Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks

static1

urlscan1

behavioral1