General

  • Target
    SetupCBBHSetupFull9.0.1.2.zip
  • Size 8.1MB
  • Sample260731-qevpsaba39
  • SHA256 48ed9ec1a64ef3c14c754ab5948dd85ff1ac5e75ee250c5fac62960a18424162
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SpiderSetupAll.msi
    • Size 8.6MB
    • SHA256 ed060d367539a4ad022a7fb9e3a8c6d4ce3d1192a059b68387a7fe7fb3306369
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Loads dropped DLL

    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      setup.exe
    • Size 607KB
    • SHA256 c67520aeb57a2d9896d08d789280fe22a5ab1e26ff39235163163ed3010a35e7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks