General
- Target Maxey's Visuals version-d584fb6c717a43d9.zip
- Size 7.0MB
- Sample260809-a5qwhsxeld
- SHA256 0c9e445f0341fd3926c073d9c5be15d086e00d004e85bad9d0cc1c80ceec8136
Score
7/10
Malware Config
Targets
-
- Target Maxey's Visuals version-d584fb6c717a43d9.zip
- Size 7.0MB
- SHA256 0c9e445f0341fd3926c073d9c5be15d086e00d004e85bad9d0cc1c80ceec8136
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target FeatureModule.dll
- Size 26KB
- SHA256 9db1061dc49a06d0a4662ac1d181e685af296739f111d20fcc616c4882e21648
Score1/10 -
- Target NewInjector.exe
- Size 3.5MB
- SHA256 98bcbf591d88ebe120d8a79a7f16f6773acbe9f499047f38ee3bbe3e6fc3419a
Score5/10-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target NunitoSans-Regular.ttf
- Size 135KB
- SHA256 e2e28393b77e81bfac576c294de53b52b9b163e632ae8a8b92325e270dfcae4a
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target eurotrucks2.exe
- Size 3.8MB
- SHA256 5ccff9e533fad2e76fad8f4a6088efe0cf20b477390cf6123703dec5b06c9a0a
Score6/10-
Drops desktop.ini file(s)
-
Network Service Discovery
Attempt to gather information on host's network.
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
- Target loader.dll
- Size 19KB
- SHA256 703159a8f47bec4bf6c53066b31b1e153405e93754062ed9ea5af5ea0ed51b9d
Score1/10