Overview

overview

10

Static

static

setup(1).exe

windows7_x64

10

setup(1).exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup(1).exe

  • Size

    283KB

  • Sample

    210727-kn2bc9rk86

  • MD5

    a87f53d5aa35baa8e387d757224e2909

  • SHA1

    76ebf1d2944c169eb024a57ba445bf3c5fed9ed4

  • SHA256

    3ee061b0859a0ccc9a99d1b33ee6a16beb1828a308a610c6311b3a6d6c1f6d8b

  • SHA512

    889426c71e57203851f51dd27d489b07839ad4d4712b9f62287bc665aa725898ecc2e7cd74129adafd29cbb5c664b5cd09f80623ba80c88db8abd8cfc0d5847a

Score
10/10
suricata

Malware Config

Targets

    • Target

      setup(1).exe

    • Size

      283KB

    • MD5

      a87f53d5aa35baa8e387d757224e2909

    • SHA1

      76ebf1d2944c169eb024a57ba445bf3c5fed9ed4

    • SHA256

      3ee061b0859a0ccc9a99d1b33ee6a16beb1828a308a610c6311b3a6d6c1f6d8b

    • SHA512

      889426c71e57203851f51dd27d489b07839ad4d4712b9f62287bc665aa725898ecc2e7cd74129adafd29cbb5c664b5cd09f80623ba80c88db8abd8cfc0d5847a

    Score
    10/10
    suricata

    • Suspicious use of NtCreateProcessExOtherParentProcess

    • suricata: ET MALWARE GCleaner Downloader Activity M1

      suricata

    • Deletes itself

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks