General

  • Target
    CH341-USB-Serial-Drivers.exe
  • Size 2.2MB
  • Sample260705-g1hsnset4q
  • SHA256 2d4f8c3c6e4ec3c2bc278fab74bfc6a739b1c22f1ab735ed94a5a1a62648a6b0
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      CH341-USB-Serial-Drivers.exe
    • Size 2.2MB
    • SHA256 2d4f8c3c6e4ec3c2bc278fab74bfc6a739b1c22f1ab735ed94a5a1a62648a6b0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks