General
- Target WeMod How to Fish Setup.exe
- Size 155KB
- Sample260831-w4gr4sybrc
- SHA256 e0f20d8c4a6ba8a0b97ac8a49215f0394457f285d419f7fe79941e4e48e236ff
Score
8/10
Malware Config
Targets
-
- Target WeMod How to Fish Setup.exe
- Size 155KB
- SHA256 e0f20d8c4a6ba8a0b97ac8a49215f0394457f285d419f7fe79941e4e48e236ff
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Reads ssh keys stored on the system
Tries to access SSH used by SSH programs.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1