General
- Target 98cae3d82be311f6a5eb0daf64b42004d95059b2b162b2ff736d51c146c87c99.exe
- Size 666KB
- Sample260507-pgvbcsdw2s
- SHA256 98cae3d82be311f6a5eb0daf64b42004d95059b2b162b2ff736d51c146c87c99
Score
8/10
Malware Config
Targets
-
- Target 98cae3d82be311f6a5eb0daf64b42004d95059b2b162b2ff736d51c146c87c99.exe
- Size 666KB
- SHA256 98cae3d82be311f6a5eb0daf64b42004d95059b2b162b2ff736d51c146c87c99
Score8/10Sets file to hidden
Modifies file attributes to stop it showing in Explorer etc.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
2Discovery
Browser Information Discovery
1Query Registry
4Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1