General

  • Target
    WiFi_BASIS_Ed_Wrapper.exe
  • Size 7.6MB
  • Sample260819-wpezzazckb
  • SHA256 42b932067e0b08cdf8961251ead8f88b6e1c3cfffdcb77e1d43c453cffd2ea85
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      WiFi_BASIS_Ed_Wrapper.exe
    • Size 7.6MB
    • SHA256 42b932067e0b08cdf8961251ead8f88b6e1c3cfffdcb77e1d43c453cffd2ea85
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Target
      $TEMP/SecureW2_JoinNow.exe
    • Size 6.9MB
    • SHA256 2bdcd46b5ccf9d7b6bc26c8e2ca3862e5acf23b1836f897862f35b5b7f8b74bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

MITRE ATT&CK Enterprise v16

Tasks