General
- Target MRON AIO 5.1.zip
- Size 2.2MB
- Sample260627-n59khsa16m
- SHA256 75697be3bbb65ed5c37be91b0508ab7783f633a33f894622087b73a283d6eb78
Score
8/10
Malware Config
Targets
-
- Target Sewi.exe
- Size 2.1MB
- SHA256 29bdf43af7fce4a48a4699f01ba35a9d23ec72109f9a8d59b84788610066b715
Score8/10-
Sets service image path in registry
This determines the executable launched when a service starts. It can be used to establish persistence.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
- Target cheat.dll
- Size 3.1MB
- SHA256 9e6baa5077bb2fa51bcce401b393d94b7bf72fdb62c80140e3537d94d5dce503
Score1/10
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1