General
- Target Оплаченый счет.com.exe
- Size 1.3MB
- Sample260722-lplseaserb
- SHA256 864b83647942f5dec0746fb5a40cdcc661bbbceea0b8cbe5df0beb9f30c30d0f
Score
7/10
Malware Config
Targets
-
- Target Оплаченый счет.com.exe
- Size 1.3MB
- SHA256 864b83647942f5dec0746fb5a40cdcc661bbbceea0b8cbe5df0beb9f30c30d0f
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 2cd3a2d4053954db1196e2526545c36dfc138c6de9b81f6264632f3132843c77
Score3/10 -
- Target $_0_/ERI_URL_Scan_5436.pdf
- Size 490KB
- SHA256 5d0366c13a22f92c939c3992947802167a2f4ebfe9043ee1aebb51d05022bb5b
Score3/10 -
- Target $_0_/curl.exe
- Size 1.7MB
- SHA256 78dbe1fbbc7e5f51fa385be08bb679251e46b43be690fbc49c412d9d4f647a10
Score3/10 -
- Target $_0_/driver.exe
- Size 293KB
- SHA256 bb243113d236f823abd1839025190e763fe34c40da4949b77558995cc1a07625
Score6/10-
Drops desktop.ini file(s)
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Discovery
Browser Information Discovery
1Query Registry
4Remote System Discovery
1System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1