Resubmissions

01-09-2024 20:43

240901-zhrxqs1hpa 10

01-09-2024 20:30

240901-zalqra1fqd 7

01-09-2024 20:06

240901-yvmm4s1cmc 7

General

  • Target

    Cozy Setup.exe

  • Size

    75.0MB

  • Sample

    240901-zalqra1fqd

  • MD5

    068eaf8b3b110ee23dc4fef1a869cb23

  • SHA1

    18c4481f160a58fd4ea0e26af83cc6bdf14ef4c8

  • SHA256

    942eac71508e78e453a97cf39154d8f36c8f0c37a9facaa3c3190466d02ae426

  • SHA512

    73d7e9b89430a5e738639b3f95b94494c0b35c9e764920cce4b3eb55a0211988f035664d3407e27f0d9da3a63cc824df939a3b83625aaf28f16c06fb35996971

  • SSDEEP

    1572864:kRu/x6vSa4mq+it03SZurRov2WS0SJwyQPYymwjrujiHR:kRx6r+2srWW19QP/jrujix

Score
7/10

Malware Config

Targets

    • Target

      Cozy Setup.exe

    • Size

      75.0MB

    • MD5

      068eaf8b3b110ee23dc4fef1a869cb23

    • SHA1

      18c4481f160a58fd4ea0e26af83cc6bdf14ef4c8

    • SHA256

      942eac71508e78e453a97cf39154d8f36c8f0c37a9facaa3c3190466d02ae426

    • SHA512

      73d7e9b89430a5e738639b3f95b94494c0b35c9e764920cce4b3eb55a0211988f035664d3407e27f0d9da3a63cc824df939a3b83625aaf28f16c06fb35996971

    • SSDEEP

      1572864:kRu/x6vSa4mq+it03SZurRov2WS0SJwyQPYymwjrujiHR:kRx6r+2srWW19QP/jrujix

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks