Resubmissions

20-09-2023 16:47

230920-va1gpahe2y 8

20-09-2023 16:42

230920-t7wpbshd9s 8

20-09-2023 16:34

230920-t3kq9shd7t 8

General

  • Target

    BedrockLauncherSetup.exe

  • Size

    42.2MB

  • Sample

    230920-va1gpahe2y

  • MD5

    e23f5ebb6e7cdd27ee2bcb948528464c

  • SHA1

    0b521cdccc28b5a29ec6c740feadb6b43560113d

  • SHA256

    ca740321cef658dd9854d4c514522d96ca115152757f734a631e48031e21692a

  • SHA512

    d3da956fed61562c5c826a8451a37af3fca15c89ff6e25f7e21eaf51a03ff43c939127586a24f91c7e68c3ec84c7b04f9024d0d7da4d5f3464dfc02588463353

  • SSDEEP

    786432:XZOKhWoD9Q3LdkE4huMWJ7pegGWgKJ6LiAEYoebh/6BO8J5YNHVE+J:XwKh38KAMtgmlOuhzPVDJ

Malware Config

Targets

    • Target

      BedrockLauncherSetup.exe

    • Size

      42.2MB

    • MD5

      e23f5ebb6e7cdd27ee2bcb948528464c

    • SHA1

      0b521cdccc28b5a29ec6c740feadb6b43560113d

    • SHA256

      ca740321cef658dd9854d4c514522d96ca115152757f734a631e48031e21692a

    • SHA512

      d3da956fed61562c5c826a8451a37af3fca15c89ff6e25f7e21eaf51a03ff43c939127586a24f91c7e68c3ec84c7b04f9024d0d7da4d5f3464dfc02588463353

    • SSDEEP

      786432:XZOKhWoD9Q3LdkE4huMWJ7pegGWgKJ6LiAEYoebh/6BO8J5YNHVE+J:XwKh38KAMtgmlOuhzPVDJ

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks