General

  • Target

    TLauncher-Installer-1.3.6.exe

  • Size

    23.0MB

  • Sample

    240501-v6kq4scc71

  • MD5

    54a9ca923f018e92c0a6e861f9ae4a00

  • SHA1

    e8af188ab3f91beceabe4302b0511d41d103ffcf

  • SHA256

    82b36c7dd202b08940fb9ef81d56f805ef4cd9da70f8a1b82a97b364aa0624dd

  • SHA512

    c401c1e278842ab1f911fa3db576e974dae8f25a3316a3dca1acef567ba1816b6f1d5bc756c126a518a2d463ae4d4b3a091d41f7e399f423a95689c106312a3d

  • SSDEEP

    393216:i25K9tbnNalQ5+LTc2rr6of5MJ7ZWqxPAIgtMIMlFRqWM/DX9QMIuLLf0a+jV03d:zK9tpai+LtrrKJBH5lFRqlDYkLf0a0VG

Malware Config

Targets

    • Target

      TLauncher-Installer-1.3.6.exe

    • Size

      23.0MB

    • MD5

      54a9ca923f018e92c0a6e861f9ae4a00

    • SHA1

      e8af188ab3f91beceabe4302b0511d41d103ffcf

    • SHA256

      82b36c7dd202b08940fb9ef81d56f805ef4cd9da70f8a1b82a97b364aa0624dd

    • SHA512

      c401c1e278842ab1f911fa3db576e974dae8f25a3316a3dca1acef567ba1816b6f1d5bc756c126a518a2d463ae4d4b3a091d41f7e399f423a95689c106312a3d

    • SSDEEP

      393216:i25K9tbnNalQ5+LTc2rr6of5MJ7ZWqxPAIgtMIMlFRqWM/DX9QMIuLLf0a+jV03d:zK9tpai+LtrrKJBH5lFRqlDYkLf0a0VG

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • Registers COM server for autorun

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks