General

  • Target

    MicrosoftEdgeWebview2Setup.exe

  • Size

    1.5MB

  • Sample

    230724-x4ehesgf36

  • MD5

    8b3b487e9dfd2852b5c8634b418e7c7e

  • SHA1

    45ff4beb4125aed9fef91e88c03e93b8853ddeb8

  • SHA256

    61ab4d9e17954ad9885736ccd19a9a7e809105074b59d12ab78f4eefbe5d9581

  • SHA512

    2c041aeb5decf51134afbbf5583ed4a23d92ff5a7bcc35450a07f123b9950a57646522a5dcb34089e118ee353ecd1041e0eb020e55f9b9f8e67bb35cf519295d

  • SSDEEP

    24576:3wy53G70SeiN9YqxCCg83udcWXDYajPF2410wuRpGfFki94qSe/wsNfzU:Ay53w24gQu3TPZ2psFkiSqwoz

Malware Config

Targets

    • Target

      MicrosoftEdgeWebview2Setup.exe

    • Size

      1.5MB

    • MD5

      8b3b487e9dfd2852b5c8634b418e7c7e

    • SHA1

      45ff4beb4125aed9fef91e88c03e93b8853ddeb8

    • SHA256

      61ab4d9e17954ad9885736ccd19a9a7e809105074b59d12ab78f4eefbe5d9581

    • SHA512

      2c041aeb5decf51134afbbf5583ed4a23d92ff5a7bcc35450a07f123b9950a57646522a5dcb34089e118ee353ecd1041e0eb020e55f9b9f8e67bb35cf519295d

    • SSDEEP

      24576:3wy53G70SeiN9YqxCCg83udcWXDYajPF2410wuRpGfFki94qSe/wsNfzU:Ay53w24gQu3TPZ2psFkiSqwoz

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Adds Run key to start application

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks