General
- Target files ME.zip
- Size 200.6MB
- Sample260719-akrbjsax4y
- SHA256 d146f7f09e37d4f5c1c3e2556515424426876b5c01137b90ec4e92f88874e5d6
Score
8/10
Malware Config
Targets
-
- Target Adobe 2025/Set-up.exe
- Size 7.3MB
- SHA256 b3506f660a3395674225893af2df056c338006d781c86f2fe05ef27130bd7c3c
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target AdobeIPCBroker.exe
- Size 1.0MB
- SHA256 99557b43cd337e46afab2d277fc0e8cfe668241780e68dd4c88c9099f65c809b
Score3/10 -
- Target customhook/AdobeIPCBrokerCustomHook.exe
- Size 197KB
- SHA256 e97c8ed6d6c95556c11f73149a54b759548fd144e23f320ffa573709db9ccba7
Score3/10 -
- Target Adobe 2025/packages/setup.exe
- Size 2.9MB
- SHA256 44d4de63f3fba24493860cc48b735e179c7ed72b8429fac5e14335570faa9c25
Score8/10-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
- Target autoplay.exe
- Size 185KB
- SHA256 3b9dabd99dc58a5242616cb6d1d876bca3046119a9b150c7d7868bf02202ea82
Score3/10
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1