Overview

overview

10

Static

static

ProstoLauncher.exe

windows7_x64

1

ProstoLauncher.exe

windows11_x64

10

Resubmissions

03-11-2021 10:15

211103-l9765sdee8 1

03-11-2021 10:14

211103-l9m6zaafhk 10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ProstoLauncher.exe

  • Size

    126KB

  • Sample

    211103-l9m6zaafhk

  • MD5

    6399365f4b8289b38b9ae4853a19ba65

  • SHA1

    f21c6301ed85ae399800384abb60716a353ab441

  • SHA256

    80048ab4b4e0128faa80c43a323a89326f01b7f86ffd176e1f66718cd26e1525

  • SHA512

    5b33d0ecea7cc998efe659d022a4bf088ec6178419bb007373982478a46a5eeb3c55cd55f4a52ed1cbce7bfee59cbfdd4827021494a800050629b8e10c395898

Score
10/10
persistencephishing

Malware Config

Targets

    • Target

      ProstoLauncher.exe

    • Size

      126KB

    • MD5

      6399365f4b8289b38b9ae4853a19ba65

    • SHA1

      f21c6301ed85ae399800384abb60716a353ab441

    • SHA256

      80048ab4b4e0128faa80c43a323a89326f01b7f86ffd176e1f66718cd26e1525

    • SHA512

      5b33d0ecea7cc998efe659d022a4bf088ec6178419bb007373982478a46a5eeb3c55cd55f4a52ed1cbce7bfee59cbfdd4827021494a800050629b8e10c395898

    Score
    10/10
    persistencephishing

    • Detected phishing page

      phishing

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Sets service image path in registry

      persistence

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Credential Access

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Process Discovery

1
T1057

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks