General

  • Target

    MBSetup.exe

  • Size

    2.5MB

  • Sample

    240111-wsg9hadecq

  • MD5

    8d2fbe492392d2f0bafd533541140b68

  • SHA1

    4d76734510a6da2c2bc45955a7fbe3dc36d3fd53

  • SHA256

    859ea73810c7aadb0127736d9fbd852ba73bea76feacf85472f3ee7eae7fd7dc

  • SHA512

    a4ef2406dbc7608ec31f925b10f7324190416993a9e60ec05f5e283c84f7fa5541efd4bd7abb6ee5be170ce947bb413149a0b6cad214f318a9fe1ce1462f9364

  • SSDEEP

    49152:cQJEzV0me4dw1uJC/S2h0wLZN2DxiIq2dPUz:NJEzLdw1usLtWRq2w

Malware Config

Targets

    • Target

      MBSetup.exe

    • Size

      2.5MB

    • MD5

      8d2fbe492392d2f0bafd533541140b68

    • SHA1

      4d76734510a6da2c2bc45955a7fbe3dc36d3fd53

    • SHA256

      859ea73810c7aadb0127736d9fbd852ba73bea76feacf85472f3ee7eae7fd7dc

    • SHA512

      a4ef2406dbc7608ec31f925b10f7324190416993a9e60ec05f5e283c84f7fa5541efd4bd7abb6ee5be170ce947bb413149a0b6cad214f318a9fe1ce1462f9364

    • SSDEEP

      49152:cQJEzV0me4dw1uJC/S2h0wLZN2DxiIq2dPUz:NJEzLdw1usLtWRq2w

    • Drops file in Drivers directory

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks