Overview

overview

9

Static

static

3

MATLAB_R20...up.exe

windows10-ltsc_2021-x64

5

$PLUGINSDIR/INetC.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...er.bmp

windows10-ltsc_2021-x64

1

$PLUGINSDI...rd.bmp

windows10-ltsc_2021-x64

1

$PLUGINSDI...gs.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ec.dll

windows10-ltsc_2021-x64

3

$TEMP/mpm.exe

windows10-ltsc_2021-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    MATLAB_R2025b_Setup.exe
  • Size 75.5MB
  • Sample260810-zd98hsxgra
  • SHA256 8cc80887670247983028e3aadaed6125810fb3cd0aeb837c4dce9787ad372812
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
discoveryransomware

Malware Config

Targets

    • Target
      MATLAB_R2025b_Setup.exe
    • Size 75.5MB
    • SHA256 8cc80887670247983028e3aadaed6125810fb3cd0aeb837c4dce9787ad372812
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1
    • Target
      $PLUGINSDIR/INetC.dll
    • Size 25KB
    • SHA256 85e03805f90f72257dd41bfdaa186237218bbb0ec410ad3b6576a88ea11dccb9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral2
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3
    • Target
      $PLUGINSDIR/modern-header.bmp
    • Size 25KB
    • SHA256 fcf07d3e647b0cf3947c8de3b2670a6c48fc6c878a44e5796b7ab8d1fddf2b51
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral4
    • Target
      $PLUGINSDIR/modern-wizard.bmp
    • Size 150KB
    • SHA256 edaf0c5964ae1665596c5c632de988d89d9a8ea48e1d253d428b95b704a2cb14
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5
    • Target
      $PLUGINSDIR/nsDialogs.dll
    • Size 9KB
    • SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral6
    • Target
      $PLUGINSDIR/nsExec.dll
    • Size 7KB
    • SHA256 b121689861b506dbc9c3797b49bc8a90d555cb7db58cb959165cc758391c00bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7
    • Target
      $TEMP/mpm.exe
    • Size 78.3MB
    • SHA256 75d895c743a4d354433f78fa0fcb53b430233128cbd05c1015f92cdeb6b8019a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    ransomware

    • Renames multiple (224) files with added filename extension

      This suggests ransomware activity of encrypting all the files on the system.

      ransomware

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral8

MITRE ATT&CK Enterprise v16

Tasks