General
- Target MuMu_6.0.1_Smpu7pC.exe
- Size 5.8MB
- Sample260731-ce3hqsba48
- SHA256 8361adf3c0574261510b3ae887e8c50b003bba62da3119ec01e1891298787933
- MD5 e2d77fe5a406b3e7ebfc9263b4e53258
- SHA1 fdb970321d8ec9cd93e7bef0bfc3caa7cb5c9ea8
- SHA512 63109990b48127ad6167fdc5e68fb51c4391920dd050249f41d1187234b45b0f9d307fb4d6c7fa632f9e5c5cfae02b66558b42026cf290d35e962d96b3ff3f5d
- SSDEEP 98304:oer6uFFkOuPB3cjtFYEUO9u97ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSwVNJz:1r6uFFkOuPG7c7ZHlLbjXLWjI+SvFCjz
- TLSH T119562392D601B3B2D41E5DFC512D87B6FE933CDE6C482C46018EF1ABB0AD5612E858DB
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
MuMu_6.0.1_Smpu7pC.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
MuMu_6.0.1_Smpu7pC.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MuMu_6.0.1_Smpu7pC.exe
- Size 5.8MB
- SHA256 8361adf3c0574261510b3ae887e8c50b003bba62da3119ec01e1891298787933
- MD5 e2d77fe5a406b3e7ebfc9263b4e53258
- SHA1 fdb970321d8ec9cd93e7bef0bfc3caa7cb5c9ea8
- SHA512 63109990b48127ad6167fdc5e68fb51c4391920dd050249f41d1187234b45b0f9d307fb4d6c7fa632f9e5c5cfae02b66558b42026cf290d35e962d96b3ff3f5d
- SSDEEP 98304:oer6uFFkOuPB3cjtFYEUO9u97ZmKdlhqap1ZcWDtIELv9VCOxeI+S0bIwrSwVNJz:1r6uFFkOuPG7c7ZHlLbjXLWjI+SvFCjz
- TLSH T119562392D601B3B2D41E5DFC512D87B6FE933CDE6C482C46018EF1ABB0AD5612E858DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1