General
- Target WinRAR.zip
- Size 6.4MB
- Sample260916-w3abmssth1
- SHA256 4852f5d5741f17d49d9a70be48530bee20408963add1f50e0946def1b3b09a4f
Score
6/10
Malware Config
Targets
-
- Target WinRAR/WinRAR-32.exe
- Size 3.0MB
- SHA256 88438a1648b614fcc9bda5b4c3d4d7b199630ccc33416c0825a1f42214a753f6
Score5/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target WinRAR/WinRAR-x64.exe
- Size 3.8MB
- SHA256 eee5d6a453e774aacc9e89df23bc9d86c1868151d19e6b6ff3c16d1beb38750b
Score6/10-
Network Share Discovery
Attempt to gather information on host network.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1