General
- Target _c5bd3bb48f8f12752ec7ca5318b38074ddd83beaccf9795a9e9d389e0b26c682.exe
- Size 920KB
- Sample260508-pyf53acx3k
- SHA256 c5bd3bb48f8f12752ec7ca5318b38074ddd83beaccf9795a9e9d389e0b26c682
Score
8/10
Malware Config
Targets
-
- Target _c5bd3bb48f8f12752ec7ca5318b38074ddd83beaccf9795a9e9d389e0b26c682.exe
- Size 920KB
- SHA256 c5bd3bb48f8f12752ec7ca5318b38074ddd83beaccf9795a9e9d389e0b26c682
Score8/10Sets file to hidden
Modifies file attributes to stop it showing in Explorer etc.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
2Hidden Files and Directories
2Modify Registry
1Discovery
Browser Information Discovery
1Query Registry
4Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1