General

  • Target
    iTaxViewer-Pro.zip
  • Size 2.5MB
  • Sample261017-arpfjayz2p
  • SHA256 db5bc2df726010e9de8de616858a0ceb2bc2d4fe7f07c2c5936a8cb8955fc57c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      iTaxViewer-Pro.exe
    • Size 2.6MB
    • SHA256 f5d2603fa53db87dc3b5a666a1e8603a3a8842198bf2858afac5f9d3419243c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies security service

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

MITRE ATT&CK Enterprise v16

Tasks