General
- Target dawn-installer.exe
- Size 3.3MB
- Sample260720-efdl4sg151
- SHA256 e6681d3b9e6adcb3dc88c98aebf41bd5a41a10daa89d6b2a5ba8addcab907cf8
Score
6/10
Malware Config
Targets
-
- Target dawn-installer.exe
- Size 3.3MB
- SHA256 e6681d3b9e6adcb3dc88c98aebf41bd5a41a10daa89d6b2a5ba8addcab907cf8
Score6/10Adds Run key to start application
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Network Share Discovery
Attempt to gather information on host network.
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target $PLUGINSDIR/NScurl.dll
- Size 7.6MB
- SHA256 efe7d99833a05f3d25cb7b151f156de3b1ee347306d2bc23a920828d3831b06b
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 996645d7f16a6294babb6da83478062aed7b72318d7a51b66e90ab5d3edc51a5
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 3a101fa91d4e8831dfb748a1e345ab74fd4a551e64254710bdf53972ba9b473c
Score3/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1