General

  • Target

    360TS_Setup_Mini_WW_InstallRox_CPI202211_6.6.0.1054.exe

  • Size

    1.5MB

  • Sample

    231012-f48mtsbh86

  • MD5

    aa3602359bb93695da27345d82a95c77

  • SHA1

    9cb550458f95d631fef3a89144fc9283d6c9f75a

  • SHA256

    e9225898ffe63c67058ea7e7eb5e0dc2a9ce286e83624bd85604142a07619e7d

  • SHA512

    adf43781d3f1fec56bc9cdcd1d4a8ddf1c4321206b16f70968b6ffccb59c943aed77c1192bf701ccc1ab2ce0f29b77eb76a33eba47d129a9248b61476db78a36

  • SSDEEP

    24576:1D1YS7FpyUxT3DC2O1zj1SqdAGFQZIxmC45UJoeXF9w:wQ5xT3DDWzjYq+ZIgL5UJoek

Score
8/10

Malware Config

Targets

    • Target

      360TS_Setup_Mini_WW_InstallRox_CPI202211_6.6.0.1054.exe

    • Size

      1.5MB

    • MD5

      aa3602359bb93695da27345d82a95c77

    • SHA1

      9cb550458f95d631fef3a89144fc9283d6c9f75a

    • SHA256

      e9225898ffe63c67058ea7e7eb5e0dc2a9ce286e83624bd85604142a07619e7d

    • SHA512

      adf43781d3f1fec56bc9cdcd1d4a8ddf1c4321206b16f70968b6ffccb59c943aed77c1192bf701ccc1ab2ce0f29b77eb76a33eba47d129a9248b61476db78a36

    • SSDEEP

      24576:1D1YS7FpyUxT3DC2O1zj1SqdAGFQZIxmC45UJoeXF9w:wQ5xT3DDWzjYq+ZIgL5UJoek

    Score
    8/10
    • Downloads MZ/PE file

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks