General

  • Target

    WindowBlinds11_setup.exe

  • Size

    95.4MB

  • Sample

    230627-vlf77aeh68

  • MD5

    72ecc6b491dbc5a46ab9f215c556691c

  • SHA1

    652c3d358185405793a91dbb8d38cfaab052383d

  • SHA256

    04128112e38f9f5f4f4441396407cc6128226f7638aef512419a9aa24b6be1ce

  • SHA512

    6e355a4c1947c68aa75af13ca5d1c59dc72e17df22cf423400d53b2875385d16771121a2f80b70c250eb50ad65a5cba5c13b67028ae6c269f87e319d54bba2c5

  • SSDEEP

    1572864:SAwUb6en83FlhNoMEvpbfJimmatUGKWvhJiorxsJivsE2I+oYk0qQIr5ZuW+a+:jGiMrhNohTcBoUfWJcSOcUE71YZqbLwr

Score
7/10

Malware Config

Targets

    • Target

      WindowBlinds11_setup.exe

    • Size

      95.4MB

    • MD5

      72ecc6b491dbc5a46ab9f215c556691c

    • SHA1

      652c3d358185405793a91dbb8d38cfaab052383d

    • SHA256

      04128112e38f9f5f4f4441396407cc6128226f7638aef512419a9aa24b6be1ce

    • SHA512

      6e355a4c1947c68aa75af13ca5d1c59dc72e17df22cf423400d53b2875385d16771121a2f80b70c250eb50ad65a5cba5c13b67028ae6c269f87e319d54bba2c5

    • SSDEEP

      1572864:SAwUb6en83FlhNoMEvpbfJimmatUGKWvhJiorxsJivsE2I+oYk0qQIr5ZuW+a+:jGiMrhNohTcBoUfWJcSOcUE71YZqbLwr

    Score
    7/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks