General
- Target MusicDownloader.zip
- Size 64.5MB
- Sample260825-rr3rlazxew
- SHA256 228de559d14c4eaebf61f7ac3686492f651bfc0fddcb4333638f56d3be53f51c
Score
9/10
Malware Config
Targets
-
- Target Git_Set-Up.exe
- Size 64.5MB
- SHA256 f3897e43ee77ccdd6482b426ff977e5f20e66beeb87f904a0f320a23a0ad5f4a
Score9/10-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Discovers running processes
Running process information can be used to identify security tools or plan follow-on actions.
-
- Target LICENSES.chromium.html
- Size 8.7MB
- SHA256 ad35e72893910d6f6ed20f4916457417af05b94ab5204c435c35f66a058d156b
Score3/10 -
- Target resources/app.asar
- Size 164KB
- SHA256 422fc69afa07922ee7fb55101ba780a70ed3d1c40d695c21eec0ad922a123925
Score3/10
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2JavaScript
1Windows Command Shell
1Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Process Discovery
1Query Registry
6System Information Discovery
4System Location Discovery
1System Language Discovery
1System Time Discovery
1Virtualization/Sandbox Evasion
2