General

  • Target

    MSPCManagerSetup.exe

  • Size

    3.4MB

  • Sample

    240213-2e5qjaae9v

  • MD5

    976da100ce70183ebe529c41bb156e70

  • SHA1

    a87ab40ecb72b14c0c561b6193f5464d59d8c3ea

  • SHA256

    cbeb0474b217bda21e7e11bb2a24f95af0f6e287c022f1e0abdd355e0268cb5e

  • SHA512

    322b50c02f33110845baa263e1fb57b21959aa2352772f3a9bfb99e49a72b4406076cb8000f4678578582d00664e372f6cd45dc2e7153de50081393563700be1

  • SSDEEP

    98304:BNsYiYigX1Eage6y3qT2huprsQr02vNyL3s0xKx8:fsYi7q1EBKhTO0AoL3Ai

Malware Config

Targets

    • Target

      MSPCManagerSetup.exe

    • Size

      3.4MB

    • MD5

      976da100ce70183ebe529c41bb156e70

    • SHA1

      a87ab40ecb72b14c0c561b6193f5464d59d8c3ea

    • SHA256

      cbeb0474b217bda21e7e11bb2a24f95af0f6e287c022f1e0abdd355e0268cb5e

    • SHA512

      322b50c02f33110845baa263e1fb57b21959aa2352772f3a9bfb99e49a72b4406076cb8000f4678578582d00664e372f6cd45dc2e7153de50081393563700be1

    • SSDEEP

      98304:BNsYiYigX1Eage6y3qT2huprsQr02vNyL3s0xKx8:fsYi7q1EBKhTO0AoL3Ai

    • Modifies WinLogon

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v15

Tasks