General
- Target D3BUGGER LUCKYWARE FUCKER.rar
- Size 75KB
- Sample260620-x44sbag12j
- SHA256 105733e8366e34f4f4f55ed709b466007da1a7ed53dae88f21b30564ada18a0e
Score
8/10
Malware Config
Targets
-
- Target D3BUGGER LUCKYWARE FUCKER/D3bugger LUCKYWARE FUCKER.dll
- Size 18KB
- SHA256 6292b24650afa2dd8ebe0a8f268029f2aa724ed8bdf0ddf931dbb16384603d8f
Score8/10Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
Drops file in System32 directory
-
- Target D3BUGGER LUCKYWARE FUCKER/D3bugger LUCKYWARE FUCKER.exe
- Size 148KB
- SHA256 82fc0293c28305e8427b68b5c04c869d1def37dc8cbece2c689a66e4bbd8788c
Score7/10Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1Privilege Escalation
Boot or Logon Autostart Execution
2Active Setup
1Registry Run Keys / Startup Folder
1