Resubmissions

26/01/2024, 07:29

240126-ja7p8aaafj8

26/01/2024, 07:09

240126-hy369sgee48

25/01/2024, 15:05

240125-sghjcaaegj8

25/01/2024, 08:08

240125-j1kndabff58

12/01/2024, 20:23

240112-y59wdsfea58

General

  • Target
    Onelaunch Software.exe
  • Size 3.2MB
  • Sample240125-sghjcaaegj
  • SHA256 6208acc0f0333a79efcb375e127926116cc771d6d6585098206b6f99c79609e0
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      Onelaunch Software.exe
    • Size 3.2MB
    • SHA256 6208acc0f0333a79efcb375e127926116cc771d6d6585098206b6f99c79609e0
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks