General

  • Target

    spicetifytools.zip

  • Size

    4KB

  • Sample

    241014-vfxyrazbqq

  • MD5

    358b342e8a4b81c74b4c6df865307878

  • SHA1

    86117341787be861fb2736f41bd519528c640df0

  • SHA256

    901a515d5f6ff0ae64cf30e5b4cc5d382aeb24a8035f270a97356dad510d3eda

  • SHA512

    54a581c3d232e54a7d728f9cb4e7da63cc3485f43942bc6b136c1cd9adec3ca374969263fab9fc9ce33f4062b5d34a6147e1ac306d554a2cde9ea30579422ce3

  • SSDEEP

    96:ElKLutCd14QfbFYK+ZGdcMcD0V5kNiJyRhg/TAJC:oF6+qcJDY5EiJQgrAJC

Malware Config

Targets

    • Target

      spicetifytools.zip

    • Size

      4KB

    • MD5

      358b342e8a4b81c74b4c6df865307878

    • SHA1

      86117341787be861fb2736f41bd519528c640df0

    • SHA256

      901a515d5f6ff0ae64cf30e5b4cc5d382aeb24a8035f270a97356dad510d3eda

    • SHA512

      54a581c3d232e54a7d728f9cb4e7da63cc3485f43942bc6b136c1cd9adec3ca374969263fab9fc9ce33f4062b5d34a6147e1ac306d554a2cde9ea30579422ce3

    • SSDEEP

      96:ElKLutCd14QfbFYK+ZGdcMcD0V5kNiJyRhg/TAJC:oF6+qcJDY5EiJQgrAJC

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v15

Tasks