General
- Target modengine.zip
- Size 17.7MB
- Sample260818-v3arqsae26
- SHA256 2745968ba69072cd4926d0e750a2792b6567df8864856f85bc9745620a6a76cc
Score
6/10
Malware Config
Targets
-
- Target ModEngine/ModEngine.exe
- Size 16.3MB
- SHA256 ef06322f836bc425100e8a7e0d99c55fb4ce21d14912cea1de0625750e24ce96
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory
-
- Target ModEngine/startModEngine.exe
- Size 1.3MB
- SHA256 65e30ef1e660ab1e0dadf73c94f6772d092292685dca10d69d848f816518d203
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Drops file in System32 directory