General

  • Target

    SuperMarioBrothers2Screensaver_pc.exe

  • Size

    6.0MB

  • Sample

    240629-dyndlazdqb

  • MD5

    a7af24ab2f95e6b51779cce3977a36b3

  • SHA1

    1e62018c76a44cb34bcb1ba50b4a17c8cf903d05

  • SHA256

    5d8dc30e2df4a2002f5fb93935910fbdf2321e826b3f84312efc573c15343c2b

  • SHA512

    318d62b30ac8815b6aa11603db44feeebc5b4dd5ac56d54a70f8394763eefda6fbd567a2f10646cb71c85816300e242a15c666391f0d19cb82db22ef185338e8

  • SSDEEP

    98304:75IjZb8gFMTYr6UjJv3BmU0fA97gAVl71kbgWJK5i8M8LbWfsAa1HIWAC6E5qiOG:LiM8uS2mVRibgeKpzWkrXV59

Malware Config

Targets

    • Target

      SuperMarioBrothers2Screensaver_pc.exe

    • Size

      6.0MB

    • MD5

      a7af24ab2f95e6b51779cce3977a36b3

    • SHA1

      1e62018c76a44cb34bcb1ba50b4a17c8cf903d05

    • SHA256

      5d8dc30e2df4a2002f5fb93935910fbdf2321e826b3f84312efc573c15343c2b

    • SHA512

      318d62b30ac8815b6aa11603db44feeebc5b4dd5ac56d54a70f8394763eefda6fbd567a2f10646cb71c85816300e242a15c666391f0d19cb82db22ef185338e8

    • SSDEEP

      98304:75IjZb8gFMTYr6UjJv3BmU0fA97gAVl71kbgWJK5i8M8LbWfsAa1HIWAC6E5qiOG:LiM8uS2mVRibgeKpzWkrXV59

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks