Overview

overview

8

Static

static

setup.exe

windows7_x64

8

setup.exe

windows10_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    379KB

  • Sample

    211019-r3aj7agad8

  • MD5

    3329dc6e93761fd9597063f368ea952c

  • SHA1

    bc1e6f6a5d19ae794547f3c7e78f6bc0dadc7d3f

  • SHA256

    cc5c6a78feac84ff7936e15863c4d4b02cab421b8c09c4735212bf8dbb07adfb

  • SHA512

    9ac13f9f210d87fa29ebc5c9440abc43550a045ea9816d21b1ea8f0532d4dbe262e6842a1dddbcd61eb40cab9b62f7c2f1e8ad361c7cca7a6a84230be3bdfda9

Score
8/10
discovery

Malware Config

Targets

    • Target

      setup.exe

    • Size

      379KB

    • MD5

      3329dc6e93761fd9597063f368ea952c

    • SHA1

      bc1e6f6a5d19ae794547f3c7e78f6bc0dadc7d3f

    • SHA256

      cc5c6a78feac84ff7936e15863c4d4b02cab421b8c09c4735212bf8dbb07adfb

    • SHA512

      9ac13f9f210d87fa29ebc5c9440abc43550a045ea9816d21b1ea8f0532d4dbe262e6842a1dddbcd61eb40cab9b62f7c2f1e8ad361c7cca7a6a84230be3bdfda9

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks