Overview

overview

8

Static

static

Antl-Setup...1).exe

windows7-x64

8

Antl-Setup...1).exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Antl-Setup-v2.05.83_x64(1).exe

  • Size

    97.2MB

  • Sample

    221123-las8yaag63

  • MD5

    d1d5bddab1d1985e1dee0696b7c9c1fa

  • SHA1

    fb73395cfd6f7f37df8bb20020d0c5bf6fe9daad

  • SHA256

    f920ffbbd07b725e4318bc71366b30f2ad01b40cd6250294f54badf28e93cefd

  • SHA512

    1e823e00e3e5d58712d6c52c44427bcd6ff9337dfcdc92d6de6c8463aa450b2886cba0f71258598a4c0246254de02b4aadeb15a8c9c5275b91195401340160db

  • SSDEEP

    3145728:v2LPmPwJOHt9eFpc13E1oD8mF5TvYrdknEP5g16:uziwc8pc13OMs5Q6

Score
8/10
discoveryspywarestealer

Malware Config

Targets

    • Target

      Antl-Setup-v2.05.83_x64(1).exe

    • Size

      97.2MB

    • MD5

      d1d5bddab1d1985e1dee0696b7c9c1fa

    • SHA1

      fb73395cfd6f7f37df8bb20020d0c5bf6fe9daad

    • SHA256

      f920ffbbd07b725e4318bc71366b30f2ad01b40cd6250294f54badf28e93cefd

    • SHA512

      1e823e00e3e5d58712d6c52c44427bcd6ff9337dfcdc92d6de6c8463aa450b2886cba0f71258598a4c0246254de02b4aadeb15a8c9c5275b91195401340160db

    • SSDEEP

      3145728:v2LPmPwJOHt9eFpc13E1oD8mF5TvYrdknEP5g16:uziwc8pc13OMs5Q6

    Score
    8/10
    discoveryspywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials in Files

1
T1081

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Lateral Movement

Collection

Data from Local System

1
T1005

Exfiltration

Command and Control

Impact

Tasks