General

  • Target

    mixamo_converter.rar

  • Size

    17.1MB

  • Sample

    240527-ybkdmsge97

  • MD5

    f6226a8c10d044b5e19719f59bcf616d

  • SHA1

    200651b0004a46b199c573d6732724c23eec4525

  • SHA256

    1f81a317f062224d12686f4a3edf5e2487ea82f4f2e82e9e5e48d8f573bc8352

  • SHA512

    96a1795376cea4c3620b0e8c6eb7dc7a1e1948c91ee9c95cbcfa9c367dd55180cb4183f829309e78246688e8b8c3f9ee5565ce1abbb172e3eeeb6055132f2a3d

  • SSDEEP

    393216:j12YKSpHleGEKvLF6w+ldKHtU67SNQ8wIPOpG4t2PckE/xKbHxWjJ:UymQLF67ldgfSNH4pVtacr4bgJ

Malware Config

Targets

    • Target

      mixamo_converter/Mixamo_Converter.exe

    • Size

      2.9MB

    • MD5

      4f53f8f9094a76b83b46dafd65306ec1

    • SHA1

      15333ab3854788ee507e02f5f3b8a56bb40ded39

    • SHA256

      e9cb66b3f432092e05e052264b8a6d503f035d274960ee0e03f9e4e81f75caae

    • SHA512

      e83cde875b5202376d52ff96a0eade1d884405f33d600565d7b2b7e4aa3c952404f917ae4e795db710899f8b8c4da57a4988cd7d7e0bb5810a3c2e91cf059220

    • SSDEEP

      49152:90TS3ewCbPaPjqcRbDD/He9EHuxtLaTInFVV1BCjB02/AT:uS3ababFny9EHSLaTIFH

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks