General

  • Target
    https://www.bing.com/ck/a?!&&p=a69510a6f4aef23d339780e9e48f5776d7f05bca36efd38bf4f54dc83c02c065JmltdHM9MTc4NzE4NDAwMA&ptn=3&ver=2&hsh=4&fclid=2ea7eda9-f171-6a18-1398-fb5af0156b22&psq=forza+horizon+6+download+free&u=a1aHR0cHM6Ly9mb3J6YS1tb3RvcnNwb3J0LTYtYXBleC5lbi5zb2Z0b25pYy5jb20v
  • Sample260820-tk67jstzbs

Malware Config

Targets

    • Target
      https://www.bing.com/ck/a?!&&p=a69510a6f4aef23d339780e9e48f5776d7f05bca36efd38bf4f54dc83c02c065JmltdHM9MTc4NzE4NDAwMA&ptn=3&ver=2&hsh=4&fclid=2ea7eda9-f171-6a18-1398-fb5af0156b22&psq=forza+horizon+6+download+free&u=a1aHR0cHM6Ly9mb3J6YS1tb3RvcnNwb3J0LTYtYXBleC5lbi5zb2Z0b25pYy5jb20v
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks