General
- Target 785a162f5d8bc7b602cf587eb1709e243771cb16c8565be10af2cde8bf594afd.exe
- Size 10.3MB
- Sample261002-pg3bzavzfx
- SHA256 785a162f5d8bc7b602cf587eb1709e243771cb16c8565be10af2cde8bf594afd
Malware Config
Targets
-
- Target 785a162f5d8bc7b602cf587eb1709e243771cb16c8565be10af2cde8bf594afd.exe
- Size 10.3MB
- SHA256 785a162f5d8bc7b602cf587eb1709e243771cb16c8565be10af2cde8bf594afd
Score7/10-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
Score3/10 -
- Target $TEMP/MicrosoftEdgeWebview2Setup.exe
- Size 1.8MB
- SHA256 81c01751c8cc385a5991abb104205d42ac70094350ee8fb9e8ea580b51bb9554
Score6/10-
Event Triggered Execution: Image File Execution Options Injection
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
- Target browser-extension/background.js
- Size 12KB
- SHA256 64a7cf27a175706f2bd32421bddb2f21d6352e05a82a93edbdf8acd5c9adca64
Score3/10 -
- Target browser-extension/content.js
- Size 18KB
- SHA256 3aaf59d983e593075af570bd12bac57937046876252884b882493893554d9e5b
Score3/10 -
- Target browser-extension/popup.html
- Size 463B
- SHA256 d08dcb07ea153f9e3db9a4e0eb94b44d9cbc732280fab36ed7b2fccfa23e6eab
Score3/10 -
- Target browser-extension/popup.js
- Size 5KB
- SHA256 b9adbf6ffc2f40908731fc92b54bf726e8359a71622efc96dae0621091934860
Score3/10 -
- Target kenveil-desktop.exe
- Size 13.8MB
- SHA256 bafa8d2f9a38c30e6e5414ef02e88d7f52bb9def429fe400236d818198c268c9
Score6/10-
Checks whether UAC is enabled
-
Network Share Discovery
Attempt to gather information on host network.
MITRE ATT&CK Enterprise v16
Persistence
Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Privilege Escalation
Event Triggered Execution
2Component Object Model Hijacking
1Image File Execution Options Injection
1Discovery
Browser Information Discovery
1Network Share Discovery
1Query Registry
5System Information Discovery
6System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1