General

  • Target

    IDM 6.xx Patcher.exe

  • Size

    971KB

  • Sample

    240311-zlz3hsga54

  • MD5

    1f0c79dbe6a9f5e1e37f776d3c0a48b6

  • SHA1

    287e6e3d771f21c9587bf928c3b124539a847e0f

  • SHA256

    8fe50399830e5677336e1f78d0bfad2975dc3704829f87ab3ede61d34de121a3

  • SHA512

    dd9d9d442185d49f78c6dfd2508400890bd02b0e354b17138619daf9ebdb48c5381df2ea972e4cbca91fe5018ecc6c10c68e179b07001c656e5ac87df391f49e

  • SSDEEP

    24576:d2yQPFUF0b+E8Lez1zZS2TV81ym9kApS7ybubjKj+NsRD:dpASENh02w+A2SyWm6

Score
8/10

Malware Config

Targets

    • Target

      IDM 6.xx Patcher.exe

    • Size

      971KB

    • MD5

      1f0c79dbe6a9f5e1e37f776d3c0a48b6

    • SHA1

      287e6e3d771f21c9587bf928c3b124539a847e0f

    • SHA256

      8fe50399830e5677336e1f78d0bfad2975dc3704829f87ab3ede61d34de121a3

    • SHA512

      dd9d9d442185d49f78c6dfd2508400890bd02b0e354b17138619daf9ebdb48c5381df2ea972e4cbca91fe5018ecc6c10c68e179b07001c656e5ac87df391f49e

    • SSDEEP

      24576:d2yQPFUF0b+E8Lez1zZS2TV81ym9kApS7ybubjKj+NsRD:dpASENh02w+A2SyWm6

    Score
    8/10
    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks