General

  • Target

    Netflix Windows Edition_48472272.exe

  • Size

    364KB

  • Sample

    241009-r2txfa1gpd

  • MD5

    237a9e619e62b5c0a5eec0da67e9f40f

  • SHA1

    afc7449a1710180192b206631ad1b1a7d7b3d220

  • SHA256

    8aa6805c5c2d73ff895044ee3a5817e9584df215d0b2d836251cc647c08a7e8e

  • SHA512

    855876aad0046ea73ee7470a1c7daf4ae58e82e8f884d04b671174f6932e920f12ab08ed8acb0d6afc71a30e89630491874bb577b676fc249d6f33633b1c2f39

  • SSDEEP

    6144:gBGqhVjKHQin39l4yjs4y6WvnThIgq76v5r5bGMUU1aBXjwFMZAOzNGiSKJ4:gBGq3i39eD41UnThIgq76R5V1adjwFMe

Score
6/10

Malware Config

Targets

    • Target

      Netflix Windows Edition_48472272.exe

    • Size

      364KB

    • MD5

      237a9e619e62b5c0a5eec0da67e9f40f

    • SHA1

      afc7449a1710180192b206631ad1b1a7d7b3d220

    • SHA256

      8aa6805c5c2d73ff895044ee3a5817e9584df215d0b2d836251cc647c08a7e8e

    • SHA512

      855876aad0046ea73ee7470a1c7daf4ae58e82e8f884d04b671174f6932e920f12ab08ed8acb0d6afc71a30e89630491874bb577b676fc249d6f33633b1c2f39

    • SSDEEP

      6144:gBGqhVjKHQin39l4yjs4y6WvnThIgq76v5r5bGMUU1aBXjwFMZAOzNGiSKJ4:gBGq3i39eD41UnThIgq76R5V1adjwFMe

    Score
    6/10
    • Checks for any installed AV software in registry

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks