General
- Target bf12f8e56988a260dca9266905ec7aea260d5ed531eb51169facb3cdb6662bc8
- Size 6.0MB
- Sample260820-kasfzagr5w
- SHA256 bf12f8e56988a260dca9266905ec7aea260d5ed531eb51169facb3cdb6662bc8
Score
5/10
Malware Config
Targets
-
- Target RemoveService.cmd
- Size 44B
- SHA256 c1b416561d470b8249419ff907c81de21c0c2cf085aa7c3fad9d979518ef9893
Score3/10 -
- Target UninstallToolHelper.exe
- Size 463KB
- SHA256 ba8d7b5662f85aa901fd6bcf86fc5989013577b18c81a91bffc1211fec31d6c8
Score3/10 -
- Target UninstallToolPortable.exe
- Size 515KB
- SHA256 25b54bfd9734aa606fbea756ff25a13cf3b03e573e63a8923d44f71b378a77b6
Score3/10 -
- Target UninstallTool_x64.dat
- Size 6.2MB
- SHA256 a47186969cb61616d2c939da02ed43ec5456a08c20aeeff3173f7d6b330d3f45
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
- Target UninstallTool_x86.dat
- Size 5.1MB
- SHA256 86c8bb2d9d707379ef5eb3bcd0ea658223e18fee699ac6161b41b729c2de1552
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1