Overview

overview

7

Static

static

1

setup_fora...7).exe

windows7-x64

7

setup_fora...7).exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    setup_forager_4.1.8_(43847).exe

  • Size

    134.2MB

  • Sample

    240907-snmfwasbkg

  • MD5

    b713f3d29771ecdd5e909125bc0fff1d

  • SHA1

    0e6c68b633f6ca45e5732a0a332b56a436bc4425

  • SHA256

    be2e5734eb29bddd6aedac336b0df5469abce5a335efa4bbe03f088afee7ff34

  • SHA512

    26f6f84328e2aae5be7cba8bbb6fb230007c19f931c909a4e4f34535bff82982b1fa01f52cf7faeebca7f83fe8b2231fa157e7ba0cd8cc2c90e70ec07fd6e670

  • SSDEEP

    3145728:EpIC3SOMRroMbhcz233jadSou0bjK0+CUdYq6Vyk+pQtyivq6zb:EpICiC233+MYKxaq6VEpOyiv3zb

Score
7/10
discovery

Malware Config

Targets

    • Target

      setup_forager_4.1.8_(43847).exe

    • Size

      134.2MB

    • MD5

      b713f3d29771ecdd5e909125bc0fff1d

    • SHA1

      0e6c68b633f6ca45e5732a0a332b56a436bc4425

    • SHA256

      be2e5734eb29bddd6aedac336b0df5469abce5a335efa4bbe03f088afee7ff34

    • SHA512

      26f6f84328e2aae5be7cba8bbb6fb230007c19f931c909a4e4f34535bff82982b1fa01f52cf7faeebca7f83fe8b2231fa157e7ba0cd8cc2c90e70ec07fd6e670

    • SSDEEP

      3145728:EpIC3SOMRroMbhcz233jadSou0bjK0+CUdYq6Vyk+pQtyivq6zb:EpICiC233+MYKxaq6VEpOyiv3zb

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Network Service Discovery

      Attempt to gather information on host's network.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks