General

  • Target

    True_Iron_1.3.3_Setup.exe

  • Size

    92.7MB

  • Sample

    240602-nacbjaca99

  • MD5

    54d20866e766b98563a35e5c3cd975d5

  • SHA1

    363715e81337e43683657979590b0fc1c12b6786

  • SHA256

    3640fec744dac2a93b4329665e4a74bd922ca337a7c4e3a6bddced670bae6478

  • SHA512

    ac372813ec0a07009a215b890a4b5755c5401c2505c3d1fe2c3a9bd4feb414bae4c82c750e73f6ab3f19eb03efdcf24cc9a96f4aad9ee5aea13690b606a96c6f

  • SSDEEP

    1572864:NU2YQ51drrmYJH/HcjYdy+Pg5PgXTrmWXvZ0M2D0Vsdf7ayCVWytBDv:NfAYBcklPCgf9fonf7YUyTDv

Malware Config

Targets

    • Target

      True_Iron_1.3.3_Setup.exe

    • Size

      92.7MB

    • MD5

      54d20866e766b98563a35e5c3cd975d5

    • SHA1

      363715e81337e43683657979590b0fc1c12b6786

    • SHA256

      3640fec744dac2a93b4329665e4a74bd922ca337a7c4e3a6bddced670bae6478

    • SHA512

      ac372813ec0a07009a215b890a4b5755c5401c2505c3d1fe2c3a9bd4feb414bae4c82c750e73f6ab3f19eb03efdcf24cc9a96f4aad9ee5aea13690b606a96c6f

    • SSDEEP

      1572864:NU2YQ51drrmYJH/HcjYdy+Pg5PgXTrmWXvZ0M2D0Vsdf7ayCVWytBDv:NfAYBcklPCgf9fonf7YUyTDv

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks