General
- Target Throwback_patched.exe
- Size 62.9MB
- Sample261113-fffl5sfx2s
- SHA256 4cd01d04c48a1634a763486df5fc318a6d587090111f9065cd481490e7a3adc9
Score
8/10
Malware Config
Targets
-
- Target Throwback_patched.exe
- Size 62.9MB
- SHA256 4cd01d04c48a1634a763486df5fc318a6d587090111f9065cd481490e7a3adc9
Score8/10Drops file in Drivers directory
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Command and Scripting Interpreter: PowerShell
Start PowerShell.
Drops file in System32 directory
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1