General

  • Target

    Mikero_AiO_Installer_Beta_v1.2.1.38.exe

  • Size

    11.7MB

  • Sample

    240710-c7w7estfqh

  • MD5

    958498eb9d05f56b1e12b747a553e1cf

  • SHA1

    ca2772465569c5633212ad1988f28dc5faeb122d

  • SHA256

    8468d572e1eba119214b234f458785dbabfc73892bb768f06da605eb67f6a275

  • SHA512

    914caeb180fea95295a742b57beddb3e622ad2d446cd56954cdea84683cd01332e74b0f9909a9f7b2d39b4bda635cc57d90fcfc42ff7bd4272e48cda81db9b0c

  • SSDEEP

    196608:kTz6fY0q2dtEaqL8yZTYZAmNe30wuk+MjetwrGLzxQCM+cBZ6o:kaftqQzyZ6Aj3uk+HwrsznUQo

Malware Config

Targets

    • Target

      Mikero_AiO_Installer_Beta_v1.2.1.38.exe

    • Size

      11.7MB

    • MD5

      958498eb9d05f56b1e12b747a553e1cf

    • SHA1

      ca2772465569c5633212ad1988f28dc5faeb122d

    • SHA256

      8468d572e1eba119214b234f458785dbabfc73892bb768f06da605eb67f6a275

    • SHA512

      914caeb180fea95295a742b57beddb3e622ad2d446cd56954cdea84683cd01332e74b0f9909a9f7b2d39b4bda635cc57d90fcfc42ff7bd4272e48cda81db9b0c

    • SSDEEP

      196608:kTz6fY0q2dtEaqL8yZTYZAmNe30wuk+MjetwrGLzxQCM+cBZ6o:kaftqQzyZ6Aj3uk+HwrsznUQo

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks