General

  • Target
    710687c2ff4d1c3138c0e8075338c7b73673ab7c65c8999b628de4b9d84c346b
  • Size 227KB
  • Sample260825-npr1jagh85
  • SHA256 710687c2ff4d1c3138c0e8075338c7b73673ab7c65c8999b628de4b9d84c346b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      710687c2ff4d1c3138c0e8075338c7b73673ab7c65c8999b628de4b9d84c346b
    • Size 227KB
    • SHA256 710687c2ff4d1c3138c0e8075338c7b73673ab7c65c8999b628de4b9d84c346b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Firseria

    • Family: Firseria

      Firseria a downloader/adware written in C++.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops desktop.ini file(s)

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks