Resubmissions

23/03/2024, 00:08

240323-afcbtsag98 8

05/03/2024, 16:42

240305-t73gwabd5w 8

General

  • Target

    https://github.com/Prax-Client/Releases/releases/tag/1.0.8

  • Sample

    240323-afcbtsag98

Score
8/10

Malware Config

Targets

    • Target

      https://github.com/Prax-Client/Releases/releases/tag/1.0.8

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks