General

  • Target

    Beezy Spoofer v3.exe

  • Size

    69.4MB

  • Sample

    240722-c15j8axgmr

  • MD5

    1009b5f4404b579041c2771663a08fbb

  • SHA1

    3eb384ca196a8218881d3a616e3e58aa7d157ee5

  • SHA256

    f6aaa0d5074306637b960aa3d5f5825b57a2281ed9b8b9634cd4a588cba99ee9

  • SHA512

    bf40680f9973e85dee420e9cdab6a3e189354a167b1afef1c9f05d46bf6566d6735e969405d1704bb3307c7f9db7395eb99e071505992ed14abc8b53d7da9b0b

  • SSDEEP

    1572864:ORWS4gFP/V4f6Gj53ikjt4jRq2GqFOPV5GiIW2qHWB75iVf6jWxECC6Q:OUJgt/VG6RmtCRlGPrcW2qHO5iVf6jUj

Malware Config

Targets

    • Target

      Beezy Spoofer v3.exe

    • Size

      69.4MB

    • MD5

      1009b5f4404b579041c2771663a08fbb

    • SHA1

      3eb384ca196a8218881d3a616e3e58aa7d157ee5

    • SHA256

      f6aaa0d5074306637b960aa3d5f5825b57a2281ed9b8b9634cd4a588cba99ee9

    • SHA512

      bf40680f9973e85dee420e9cdab6a3e189354a167b1afef1c9f05d46bf6566d6735e969405d1704bb3307c7f9db7395eb99e071505992ed14abc8b53d7da9b0b

    • SSDEEP

      1572864:ORWS4gFP/V4f6Gj53ikjt4jRq2GqFOPV5GiIW2qHWB75iVf6jWxECC6Q:OUJgt/VG6RmtCRlGPrcW2qHO5iVf6jUj

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Legitimate hosting services abused for malware hosting/C2

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v15

Tasks