Overview

overview

6

Static

static

1

BotMek-Install.exe

windows10-ltsc_2021-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    BotMek-Install.exe
  • Size 4.1MB
  • Sample261029-xpcqaasvav
  • SHA256 807e72c85ab94278d9e0bb16ce82c18762a609092ab9d35305db042d61cdddfd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoveryspyware

Malware Config

Targets

    • Target
      BotMek-Install.exe
    • Size 4.1MB
    • SHA256 807e72c85ab94278d9e0bb16ce82c18762a609092ab9d35305db042d61cdddfd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    adwaredefense_evasiondiscoveryspyware

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks