General

  • Target
    Aimbot.exe
  • Size 10.6MB
  • Sample260804-mprjbsxhqa
  • SHA256 1854a580b74158c154edcb3b78e4270d3672f245b6e2b1ce5b7a6b5b0e3224c7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Aimbot.exe
    • Size 10.6MB
    • SHA256 1854a580b74158c154edcb3b78e4270d3672f245b6e2b1ce5b7a6b5b0e3224c7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Creates new service(s)

    • Modifies file permissions

    • Stops running service(s)

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks