General

  • Target
    Bootstrapper.exe
  • Size 800KB
  • Sample260907-pfybmatzes
  • SHA256 8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Bootstrapper.exe
    • Size 800KB
    • SHA256 8f2e28588f2303bd8d7a9b0c3ff6a9cb16fa93f8ddc9c5e0666a8c12d6880ee3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks whether UAC is enabled

    • Network Share Discovery

      Attempt to gather information on host network.

MITRE ATT&CK Enterprise v16

Tasks