Analysis
-
max time kernel
133s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
13-10-2022 00:57
Static task
static1
Behavioral task
behavioral1
Sample
MBSetup-6DC0DF53-37335.37335.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MBSetup-6DC0DF53-37335.37335.exe
Resource
win10v2004-20220812-en
General
-
Target
MBSetup-6DC0DF53-37335.37335.exe
-
Size
2.4MB
-
MD5
9bf8368a63eb5edfcd4a9c39d1e8a34d
-
SHA1
5caf919faa07410cf4794d62d63691b71988304f
-
SHA256
1663e47799fa48e4361a9adc5079405b858b57562a011e70bc31a757e63d7529
-
SHA512
cf39b2534cd6b70a6129784eac7b952ffba3ea2e9efff46d03a300f1b9327e698b2e827367ef1abcccb0a6449d84193bff31796abc5305e6ed57212d1e9722e8
-
SSDEEP
24576:A5JgVGJHVQlPC/F9tLX2SfZSJw0wd/ZL8Ug+JwNZgCxiIsCA2flywBLfJkPK:2EYYwTBX2S4Jw0wxZN2DxiIq2d1JkPK
Malware Config
Signatures
-
Drops file in Drivers directory 1 IoCs
Processes:
MBSetup-6DC0DF53-37335.37335.exedescription ioc process File created C:\Windows\SysWOW64\drivers\mbamtestfile.dat MBSetup-6DC0DF53-37335.37335.exe -
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 1 IoCs
Processes:
MBSetup-6DC0DF53-37335.37335.exedescription ioc process File created C:\Program Files (x86)\mbamtestfile.dat MBSetup-6DC0DF53-37335.37335.exe