4a7e93aa8515b666c5afbfd0b040fbbff0fc5b555b3e1873af951383ae264195

Sharing

Copy URL Twitter E-mail

General

Target
browser.7z
Size 4.6MB
Sample260731-gy557aea34
SHA256 4a7e93aa8515b666c5afbfd0b040fbbff0fc5b555b3e1873af951383ae264195
MD5 b2f639563e17513d8cbdcd3087529675
SHA1 89be81b9fb06a6d183d83cf8484602d50962c011
SHA512 7323bbcc011443d7eccdf10f8db9dec2ff86af91e61ca551c77de825b5ad8f84bec99ae3be707296779e1081f30770d7bb85cc08f8da3e073f3164bc1a2ab239
SSDEEP 98304:kkBbBRXSDYVmLubn/5kVEjOijBZchWlJ5dIBROer:kklSDRiT5P/d5/3I+er
TLSH
T17126334EA1F3D40CD776DB37809850F0B91AD0EBCB8154EB7386A241EE77117DE4AA26
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Browser_Cloud/6d16e241-c3e1-49a5-9931-66bf23dfa94d_VideoMail-XP.Exe
- Size 460KB
- SHA256 1c67e536da72aa53bca197a26bfafc31743fba6eb081d5532102b56e3a697153
- MD5 f8842a41354f2b80625739ea34647811
- SHA1 644cd08782e741063c98571a37e796893d937659
- SHA512 8f4c3f40e5ac151faa1e1ee1e424595c5f76a26435862941b02fd20ed8af8f64244b85588c89c69db61d3ac7a72ea476548d0d9bc291c6cb1bfe3583dd01148c
- SSDEEP 6144:nljPbgYlIkGpBBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM09I:nVPEcfGJhLtZynpvqjjgp0oFaH0GJVI
- TLSH
  T198A42308F913CBA8D7F42C3A947389106124E762CB438EBD15E3F3497E7E224A65756E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2
- Target
  Browser_Cloud/6d16e241-c3e1-49a5-9931-66bf23dfa94d_VideoMail.Exe
- Size 460KB
- SHA256 d22ebd186e592edd45f3f160929a5fa326fdf12b874bcd4985ef492db00f6ac0
- MD5 b8a7b6cce5989cd512f00f1eea09b056
- SHA1 fe3809b46c4bea67902a21d3780cd0b85297b3d8
- SHA512 de5c1d11c4060ce77f84072c89e480cf222efb2cef280273d0ced12d6793d5ee97512d71f2ab7dfd0d9378570b28e0ef186fb50958073beb4f363538064eaba4
- SSDEEP 6144:aljPbgYlI6+6BBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM095:aVPEcx+ehLtZynpvqjjgp0oFaH0GJV5
- TLSH
  T1B4A4124CA0B7566CC7E4EC3BD6E291305034A65EAE4249D93563B3687EFF130664E0AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral3 behavioral4
- Target
  Browser_Cloud/Aida 64.Exe
- Size 454KB
- SHA256 65074ae0a06a032f75155ece169d6929204d11ad0156da888205ad727e781dc6
- MD5 588491db0a41bbda44c24fa950e2a0e2
- SHA1 45e98a719ac8547acfd50aeecb223705a18c6d85
- SHA512 95285f1a14fde32f23769f1133eeb26f7e1f7e571a62c1f12086d5bf3f84acc85dbc1fa05156410d2fbec696c5ddea182d335034f256fcb4b10c5708362b036b
- SSDEEP 12288:PFJuYVvUY4qiynOvqXggTUZNnK/i3DnAxn:NJuBY4qrX2K/i3DAxn
- TLSH
  T1FDA423413D25B608DBF29E34A8735BBFA61B63211ACDC29D29ECB30C247E54003897BD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral5 behavioral6
- Target
  Browser_Cloud/AlpeMix.Exe
- Size 459KB
- SHA256 292965b505b797619f69d6bf18ff007e21f63c7726be4c0fec666f58d8e94fa8
- MD5 dc3b6d2c871c784ef45ce666e601da47
- SHA1 9e173e9138f22001ca465e0301ce48483d6934ad
- SHA512 c8ca0a987b3f543ac85dfe8cb67103d00c9daca147b3966c9dc37690257475d2f7cd2832c8142db514046465723859db944d1b64e72aac37cbe4e4f075d370c5
- SSDEEP 6144:tljPbgYlIudbnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhCR:tVPEclN4qiynOvqXggTUZNnK/i3DnAxM
- TLSH
  T12CA4224BBDF58908DBE94D3C683A69E7E21B5B6051C6C29C2D7D734BE13A00C26C967C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  Browser_Cloud/Chrome v38.Exe
- Size 460KB
- SHA256 711165e99ca128d68a7ac495107b44a6a917b7d6351568e29ab1eaedcf3d7b31
- MD5 aa1c9cc73fb0ad9c06cb8e7fdce1fddc
- SHA1 39831449f1c72f64da37efeda825ee2f051af3db
- SHA512 6cf448b0a63ef7b7301de02000fa0a24895c60e080c1793f507889674207f236aa09d27df13b68ecc703bd4b544ddba179307d6e4f34474eb84e9404eb692705
- SSDEEP 6144:eljPbgYlI6vbnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhCT:eVPEcxD4qiynOvqXggTUZNnK/i3DnAxU
- TLSH
  T177A4224C78BB890CDAE1D93AEAF25936A135561C7DC682DC396173692CFF020174D5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10 behavioral9
- Target
  Browser_Cloud/Chrome v49.Exe
- Size 460KB
- SHA256 340ea8eddc33fb4935b7d5664442d83f7f3ce31aa9bed38f9cd4c261f268bfb1
- MD5 1f149bd2736a9501cc05960eefa06936
- SHA1 49b9110ea8f0623e01a82fafa25e207c6ea30e72
- SHA512 991428454f54beb7d085a65c671acd3dd0c26d09454691223294c7ff6f345fb12a26825d165e99b4f35659da38c9f47650ac1ff3cafeee8cc2f2ab0c640a21c4
- SSDEEP 6144:pljPbgYlIU/bnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhC7:pVPEcXT4qiynOvqXggTUZNnK/i3DnAx+
- TLSH
  T1ACA42248FE37A938DFA54E3CAC33593BAD1A525351CEC2BCE9E5534A242B0C036855BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral11 behavioral12
- Target
  Browser_Cloud/Chrome v49e.Exe
- Size 460KB
- SHA256 47aae8a68a90932c36a7a2de4380fff08c0b90f4acbac310cfd4fa00168f7aa4
- MD5 bcb1bf8eca1d5c106847e786ddf4ad44
- SHA1 35c8e0abd48667adfbc32dd52de855ac15085d23
- SHA512 bbed8dc3c0f21d1ed45978eef19fe1d26d8635762f5167af213ce38730577b8958e06fe7fc4b1fc4b52e582760d32737d3abe08497ecff1916ca82afc76f15cb
- SSDEEP 6144:JljPbgYlIUBaBBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM09l:JVPEcXB+hLtZynpvqjjgp0oFaH0GJVl
- TLSH
  T170A42208EA536778CBA92D3E887391345C00A2D7C34EC67DD5E3A30A766B1D0766713E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral13 behavioral14
- Target
  Browser_Cloud/Chrome v63.Exe
- Size 460KB
- SHA256 ac38595c8860762a9a29c519fe198f5d4fb3125b7d4d791a679787be1d5c7267
- MD5 aca2ab8f68ae3bf1243f13964f792a9a
- SHA1 bdc006f78e967c8b54b3e95f87ac82547a7715c5
- SHA512 d6e16067e9e8d2f8138c991cf662b498ab988ef06098f8f96208f4854a367e55249ce9b0a45c718e1f27138f1659148ff0528af2447808a8b186d4dbe54c0676
- SSDEEP 12288:iVPEcfGq4qiynOvqXggTUZNnK/i3DnAxs:i53eq4qrX2K/i3DAxs
- TLSH
  T12CA42345BD26C908DFF14D38B8335D27F226E6104ADAC6FC6AE6B34E193E01427856EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral15 behavioral16
- Target
  Browser_Cloud/Chrome v66.Exe
- Size 460KB
- SHA256 0253aa4ea7993695fa8e6a71c7aa316460dc7ff0649ceae15aef1e81ac879c41
- MD5 7343b37f09adaee4117ca19268ae82e3
- SHA1 82f4173660e94b17970b5a699ae9b46bba1f866d
- SHA512 3f9155017d567bc2372845a8bacbd9b66334c36fa6db452e94ef29b3dbb41553ae63e234cb99367cf14a26d54d92c67a02c58cebd01c5f43efe8b61d912c0874
- SSDEEP 6144:hljPbgYlIUSbnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhCP:hVPEcXA4qiynOvqXggTUZNnK/i3DnAx2
- TLSH
  T17AA42248FE275A38DFA64E3C6C33593BAE16525755CEC2BCEAE5534B242B0C032855BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral17 behavioral18
- Target
  Browser_Cloud/Chrome v69.Exe
- Size 460KB
- SHA256 04709dcfc1623f4e54c3ecd18850e81b7ce50aca1345262f03cb6ba04dcd6b6a
- MD5 7cd3022de4f102aa77b33dd68d1ee988
- SHA1 73363c5a962ba38bd5113882d5e54df5d14d137e
- SHA512 4679014f92b9e0caedb2bb2351b5df793667b09aedc2c136292fadd11f6b5f373f0f98a5572751a7d1a81794b512e9ab1248398cb1fc74aff1a45cc7628f062f
- SSDEEP 12288:XVPEcfGML4qiynOvqXggTUZNnK/i3DnAxV:X53ew4qrX2K/i3DAxV
- TLSH
  T1A0A423447D27C908EFF14D38B8335D37F32A96105AD6C6FC6AE6B34A193E1142785AAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution spyware stealer upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral19 behavioral20
- Target
  Browser_Cloud/Chrome v74.Exe
- Size 460KB
- SHA256 328256b4f992ff5c344e215b7592d0a9b5b87d77848639fcc60c3a27aa0b7106
- MD5 ad47f36eb8c050b54a688fc0358e3bdd
- SHA1 6978eeee2f9d3c1b5cb5c0298a7eb7cbcf1086be
- SHA512 f2396da8d58a151e9609ce69725d6a3ef743a70e3b1911cc70d2916355e32a2428d532854e00812c4d4d4d269c8d003a43c5fdd77dd4b64f4b16fbf44c47d784
- SSDEEP 6144:1ljPbgYlIURbnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhC5:1VPEcXp4qiynOvqXggTUZNnK/i3DnAxM
- TLSH
  T12FA42348FE279938DFA64E3C6C33593BAE16525751CEC2BCEAE5634B242B0C036455BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral21 behavioral22
- Target
  Browser_Cloud/Chrome v74e.Exe
- Size 460KB
- SHA256 20a6a58f754967e12733332a75765e26325b5179596e6428c84b94b22d0cb5c5
- MD5 91695f3924df3ceefc25f81f589db4e5
- SHA1 23421252dcbd6668618e1467a9061c013623b5e4
- SHA512 936e1a33055cc7b75987c567dc19f06b40e9a55c2148d11c142cf7b13813cc29d9e0b62af6f56a0a52daf7e1fbe2fbcbf58ae26fc72c447f7ba68d9190e997f8
- SSDEEP 6144:JljPbgYlIUDCBBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM09z:JVPEcXDmhLtZynpvqjjgp0oFaH0GJVz
- TLSH
  T149A42208EA536678CBA82D3E887391345C05A6E7C38EC67DD5E3B34A766B1C0756703E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral23 behavioral24
- Target
  Browser_Cloud/Chrome v74x64.Exe
- Size 460KB
- SHA256 fc3e9512da8f944e5f70321e47f036980981c92768087d090ca2ba0f2de60639
- MD5 0a3bad96935a7d1673c035170421bf67
- SHA1 2c0fe5e668440b3ab0994d703542d3cf820d3d8a
- SHA512 d3091c8e89d1e93eac6902d9ad2b6883e271d32800ea986619b05e9c700ae590c82ae9b2e6b1de8dd1c557d4b0410d3b0b3374161d2e2d36b31580dab491364e
- SSDEEP 6144:1ljPbgYlIUBbnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhCb:1VPEcXZ4qiynOvqXggTUZNnK/i3DnAxQ
- TLSH
  T121A42348FE279938DFA54E3CAC33593BAE16925752CEC2BCE9E5534B242B0C036455BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral25 behavioral26
- Target
  Browser_Cloud/Chrome v74x64e.Exe
- Size 460KB
- SHA256 a214616b5e257548a5448b870faf83d8fcb339cc05258bc5554c63a0da51e919
- MD5 e765a0da477d0b30ee216b1b8256bcc0
- SHA1 8144fdf3fabf52f75540367b0caa95922a6e7316
- SHA512 b94eb9c7bf62098599237abe182974fdd4e9f758b686ffe345bedbddd9f7de0351479e53272b698086a2ee0b2eaa57102b4ca840a7dcfaab81d49ec203ed74db
- SSDEEP 6144:xljPbgYlIUmBBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM09u6:xVPEcXKhLtZynpvqjjgp0oFaH0GJVd
- TLSH
  T134A42208EA536778CBA92D3E887395241C00A2D7C34EC67DD5E3B34A766B1D0766703E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral27 behavioral28
- Target
  Browser_Cloud/Chrome v76.Exe
- Size 460KB
- SHA256 4746efb8088330b2edd27cde102717942549f2d0b987bc24d75603593efb3696
- MD5 fec7d70ebbdd8b1e32392e16fe7184e9
- SHA1 5599b24edca7a201fa9dd7f691b53c07d6e7d52f
- SHA512 0d90a15f8d70128eaba8b3e94f74f0328f8672057480e6f19fe0120bb1ae2b2fc2dfa65d8f05b18a9a0dcbeb3e9312509e92f1313228771108bba6a218472fc4
- SSDEEP 6144:CljPbgYlI6obnczqiysgbgd+8L2Lt9aUedgS+TGktK/ZN2UfH+smsb4i3qenmhCW:CVPEcx64qiynOvqXggTUZNnK/i3DnAxl
- TLSH
  T115A4224C78BB890CDAE1D93AEBF24936A135921C7DC682DC396573692CBF020274D5EC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral29 behavioral30
- Target
  Browser_Cloud/Chrome v76e.Exe
- Size 460KB
- SHA256 a56f7b2a750bd23e493a542e2b7a006e50c0e41dadd97d331c35b6cf9c2fbf68
- MD5 8f6bbb0856ba61de3d1de3615f8afbc1
- SHA1 c8eb8720e4a554ec180f36eb69b3a80efc50da2d
- SHA512 0287454df40b69c388d11d2ae9cae8384b1d166cbcfe35cc0bd6d8c11ac0cfded78368c206119575c7a0af0a42a143e0ee54f9dd3ba95a3ffa596fe2ef7755a0
- SSDEEP 6144:aljPbgYlI6i+hBBh/0UenmZysgQgj+8L2LZ9aPedgk+T1mtJAXFxAHKJ83wWlM0n:aVPEcx/BhLtZynpvqjjgp0oFaH0GJV9
- TLSH
  T167A4120CA1B7566CC7E4EC3BD7E291305034A65EAA4249D93563B3687EFF130664E0AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

defense_evasion discovery execution upx
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

Remote System Discovery

T1018

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Reads user/profile data of web browsers

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Reads user/profile data of web browsers

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Reads user/profile data of web browsers

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

Checks computer location settings

Executes dropped EXE

Enumerates connected drives

UPX packed file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7