General

  • Target

    https://cdn.discordapp.com/attachments/1231528352041402389/1231561420781654126/Blend_EAC_Bypass_by_1hAck.exe?ex=663767f4&is=6624f2f4&hm=a5d5522066234c0f068017401bfd96cc5c882416c38ef8237efbf9c4b5c73cc9&

  • Sample

    240421-nsjtbsab89

Score
8/10

Malware Config

Targets

    • Target

      https://cdn.discordapp.com/attachments/1231528352041402389/1231561420781654126/Blend_EAC_Bypass_by_1hAck.exe?ex=663767f4&is=6624f2f4&hm=a5d5522066234c0f068017401bfd96cc5c882416c38ef8237efbf9c4b5c73cc9&

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v15

Tasks