General

  • Target
    exc.exe
  • Size 58.2MB
  • Sample260708-pb49dags4l
  • SHA256 4fda90856a7faa3f10b463bc841c15dac0e1aad707512c5631086ee2758b8d40
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      exc.exe
    • Size 58.2MB
    • SHA256 4fda90856a7faa3f10b463bc841c15dac0e1aad707512c5631086ee2758b8d40
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      ShaderZone.exe
    • Size 125.0MB
    • SHA256 2792032f8e8f9744c750a98fa37f23752319af59631c723a3ed27e43e95f8a31
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

    • Target
      resources/elevate.exe
    • Size 105KB
    • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $R0/Uninstall ShaderZone.exe
    • Size 483KB
    • SHA256 7f0a18080f42d2eb56e821e0483ac21412b8cbf479d488aac04c560578c05805
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks