General

  • Target
    Spoofed(check).exe
  • Size 133.6MB
  • Sample260731-de62labf58
  • SHA256 8c7e1388749c946ac7773d1186cfa1a0002e7b4e622668c6bdf43e2ab9cb51b8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Spoofed(check).exe
    • Size 133.6MB
    • SHA256 8c7e1388749c946ac7773d1186cfa1a0002e7b4e622668c6bdf43e2ab9cb51b8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v16

Tasks