General

  • Target
    Launcher.exe
  • Size 101.1MB
  • Sample260909-pfbsmavfld
  • SHA256 0a90074c5f06e9df0bf7ed12a26f831c0e5d39f01537bbe9f3bb03f3e0d3fa54
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Launcher.exe
    • Size 101.1MB
    • SHA256 0a90074c5f06e9df0bf7ed12a26f831c0e5d39f01537bbe9f3bb03f3e0d3fa54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v16

Tasks