General

  • Target
    Hyperbeam-Setup-2.1.0.exe
  • Size 102.5MB
  • Sample260727-arpfjatckh
  • SHA256 9cff81ae89bc4a05247ce9aa9d4bcb713a3017853ce08ae40491e44995d1a3e6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Hyperbeam-Setup-2.1.0.exe
    • Size 102.5MB
    • SHA256 9cff81ae89bc4a05247ce9aa9d4bcb713a3017853ce08ae40491e44995d1a3e6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Target
      assets.pyc
    • Size 95KB
    • SHA256 f7c2d112aab3700c9cdcb127821f4a1a10431bedcef8ba2aeb1272182405716e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks