General

  • Target
    MV 2.7.1 version-2366ba214ec740ca FIXED.zip
  • Size 21.5MB
  • Sample260930-vq5fkstenb
  • SHA256 978bb18559b1602d798833ba4125e2615caed7880a1b84ce5e1ba88c34cb906f
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      eurotrucks2.exe
    • Size 24.7MB
    • SHA256 6986d9162e0c7ae490da4777b90bb021cbd61cbffe5ae37856021979b5edf5fd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects references to legitimate web services potentially used as dead drop resolvers

      Detects Telegram, Steam, and other legitimate web-service references that may be used to retrieve secondary C2 infrastructure.

    • Drops desktop.ini file(s)

    • Network Service Discovery

      Attempt to gather information on host's network.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks