Overview

overview

8

Static

static

1

Feather La....5.exe

windows7-x64

8

Feather La....5.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Feather Launcher Setup 1.5.5.exe

  • Size

    106.8MB

  • Sample

    230529-2wjjmadh38

  • MD5

    a8130d85ef43e42a33fe1064a4f135ed

  • SHA1

    1ba835089ac121f3141663ca4a253f86adc64b3a

  • SHA256

    327c129fa0d9b80666eaef565d13709a82d8558f9e9d525e4eb2b6b1ded512be

  • SHA512

    73afb6ae38f6087dbbb3014c3d4e3f759643dfbbb5d8960ce1521925ec172504af78ce3c7afcc51478c258ef792e4755c094c0845e20a221596863706a2afb0a

  • SSDEEP

    3145728:KLQEzgQqYBz+GBTRJmgm0I6KFO7Ahhq60XYJMP2Zs:bwdqIzlggmtg7Ahh9mxes

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Feather Launcher Setup 1.5.5.exe

    • Size

      106.8MB

    • MD5

      a8130d85ef43e42a33fe1064a4f135ed

    • SHA1

      1ba835089ac121f3141663ca4a253f86adc64b3a

    • SHA256

      327c129fa0d9b80666eaef565d13709a82d8558f9e9d525e4eb2b6b1ded512be

    • SHA512

      73afb6ae38f6087dbbb3014c3d4e3f759643dfbbb5d8960ce1521925ec172504af78ce3c7afcc51478c258ef792e4755c094c0845e20a221596863706a2afb0a

    • SSDEEP

      3145728:KLQEzgQqYBz+GBTRJmgm0I6KFO7Ahhq60XYJMP2Zs:bwdqIzlggmtg7Ahh9mxes

    Score
    8/10
    discoverypersistence

    • Blocklisted process makes network request

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks