General
- Target Feather-Client-Launcher-Patched.exe
- Size 102.1MB
- Sample260719-tyn8wset7k
- SHA256 cc14bf521e1e869efe0e762ce9028b5e41176c010fc901742442191097dcb858
- MD5 2c24592f882907da6b10f1a4f11d4819
- SHA1 bd6d8293dfec5a048186a3da3c198d5f263d00a8
- SHA512 220b1860a9bcde1646ac6899d622e867be95427cd8c56faef5e95579f69604bac314565034557ded1a3c36a8128db32823ca6805056762048d3aab4648af6ce5
- SSDEEP 3145728:YVI/teVlJqrNCwnP+mX3sF9v7Xe3ltPRcV3x+9qve:3t4lsr8i7XGeVFRcVM9qve
- TLSH T1AC38333FB5EB653EE46E353AB572A220183F624261178C4262F8C85ECF2D4B01D7E957
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target Feather-Client-Launcher-Patched.exe
- Size 102.1MB
- SHA256 cc14bf521e1e869efe0e762ce9028b5e41176c010fc901742442191097dcb858
- MD5 2c24592f882907da6b10f1a4f11d4819
- SHA1 bd6d8293dfec5a048186a3da3c198d5f263d00a8
- SHA512 220b1860a9bcde1646ac6899d622e867be95427cd8c56faef5e95579f69604bac314565034557ded1a3c36a8128db32823ca6805056762048d3aab4648af6ce5
- SSDEEP 3145728:YVI/teVlJqrNCwnP+mX3sF9v7Xe3ltPRcV3x+9qve:3t4lsr8i7XGeVFRcVM9qve
- TLSH T1AC38333FB5EB653EE46E353AB572A220183F624261178C4262F8C85ECF2D4B01D7E957
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1