General
- Target client.exe
- Size 8.0MB
- Sample260516-pvpm2adw8w
- SHA256 aefc1a500eb669f56826fcf80d1d3d2f8b83617ed417bacbe00430b06c3d6cdd
Score
10/10
Malware Config
Targets
-
- Target client.exe
- Size 8.0MB
- SHA256 aefc1a500eb669f56826fcf80d1d3d2f8b83617ed417bacbe00430b06c3d6cdd
Score8/10Downloads MZ/PE file
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Detected potential entity reuse from brand MICROSOFT.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1SIP and Trust Provider Hijacking
1