General
- Target G2WInstall.exe
- Size 1.4MB
- Sample260621-dbesyaa13n
- SHA256 dcc03f02f955c3bf6fe7608a63ce131a7ffcb6ebe42db5297ea01896bffdad46
Score
7/10
Malware Config
Targets
-
- Target G2WInstall.exe
- Size 1.4MB
- SHA256 dcc03f02f955c3bf6fe7608a63ce131a7ffcb6ebe42db5297ea01896bffdad46
Score7/10-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
5Remote System Discovery
1System Information Discovery
6System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1