Overview

overview

8

Static

static

3

github.sof....8.exe

windows7-x64

7

github.sof....8.exe

windows10-2004-x64

7

github.sof....8.exe

windows11-21h2-x64

8

Resubmissions

18/06/2024, 23:15

240618-28pw6syeph10

18/06/2024, 23:08

240618-24vxmashmp8

Sharing

Copy URL Twitter E-mail

General

  • Target
    xmlgithub.software.1.0.8.zip
  • Size 139.7MB
  • Sample240618-24vxmashmp
  • SHA256 c233af5760c1d38886b4347e46bba6be948c226dd23fcb6ecef8f418a2ba6008
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Targets

    • Target
      github.software.1.0.8.exe
    • Size 684.0MB
    • SHA256 257921a35555d31ad07cb05a838ab1003d94cdf66a12e21e6fcea5559f53280b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    8/10

    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks