General

  • Target

    aTube_Catcher_FREE_9991.exe

  • Size

    24.1MB

  • Sample

    240611-x92vxayele

  • MD5

    eec82d625010a7a177035dc6d7540824

  • SHA1

    3ff6ef5202a0b2d35d7509f703e3ae6d79305acd

  • SHA256

    61c11fd68de2448e1c396b811052766d4dbaf1812079b0b5278478eda367efb0

  • SHA512

    0ceabe9034c87149148d47e5302a1ee2a33b0739c897d6c51a7ea865db7fdbcf23ce0599f7155820a92948f7522e2c4a7acff0a9b4e7fe48d4e0eeeda427ef94

  • SSDEEP

    393216:AdrXnY1guAEElI9BUfibFyqpYCD8apON5AtWPm/v7xltQ/UiZdmuSngSLcGKrRi:iygx4UypVxpQAtKmHrtPBnRLcGKrRi

Malware Config

Targets

    • Target

      aTube_Catcher_FREE_9991.exe

    • Size

      24.1MB

    • MD5

      eec82d625010a7a177035dc6d7540824

    • SHA1

      3ff6ef5202a0b2d35d7509f703e3ae6d79305acd

    • SHA256

      61c11fd68de2448e1c396b811052766d4dbaf1812079b0b5278478eda367efb0

    • SHA512

      0ceabe9034c87149148d47e5302a1ee2a33b0739c897d6c51a7ea865db7fdbcf23ce0599f7155820a92948f7522e2c4a7acff0a9b4e7fe48d4e0eeeda427ef94

    • SSDEEP

      393216:AdrXnY1guAEElI9BUfibFyqpYCD8apON5AtWPm/v7xltQ/UiZdmuSngSLcGKrRi:iygx4UypVxpQAtKmHrtPBnRLcGKrRi

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks