General

  • Target

    MBSetup (2).exe

  • Size

    2.7MB

  • Sample

    241229-r3297stnhm

  • MD5

    cd4de7a9a97440100f4886c7b463a67d

  • SHA1

    d624a57038639d6578871cee2ff2a383d7282486

  • SHA256

    46ef8b210a36766f6c8847119088dce219baa7036699f687638a8fc77813f86a

  • SHA512

    1bcff79a633a01c04f3af2f87e5895c4842de9c2952b8b04505cb23d40f142dc24c752834b122b886ae2eb8018f50818c273a9239b5e1ddeb4778d7e8f27e31d

  • SSDEEP

    49152:A3JOy1S785BSdlqwAeyfvE0Z3R0Tnxn1o2d5UquGFzYdy/v:A5Oy1S7mBOAeKtwnW2c2

Malware Config

Targets

    • Target

      MBSetup (2).exe

    • Size

      2.7MB

    • MD5

      cd4de7a9a97440100f4886c7b463a67d

    • SHA1

      d624a57038639d6578871cee2ff2a383d7282486

    • SHA256

      46ef8b210a36766f6c8847119088dce219baa7036699f687638a8fc77813f86a

    • SHA512

      1bcff79a633a01c04f3af2f87e5895c4842de9c2952b8b04505cb23d40f142dc24c752834b122b886ae2eb8018f50818c273a9239b5e1ddeb4778d7e8f27e31d

    • SSDEEP

      49152:A3JOy1S785BSdlqwAeyfvE0Z3R0Tnxn1o2d5UquGFzYdy/v:A5Oy1S7mBOAeKtwnW2c2

    • Drops file in Drivers directory

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Detected potential entity reuse from brand STEAM.

MITRE ATT&CK Enterprise v15

Tasks