Resubmissions

07-12-2022 05:49

221207-gjaqqsae47 9

07-12-2022 05:20

221207-f1q9dagg59 9

23-11-2022 09:35

221123-lktx8afa8y 8

General

  • Target

    setup.exe

  • Size

    73.7MB

  • Sample

    221207-gjaqqsae47

  • MD5

    02dde17be4c7a3dce827d28df8117e3c

  • SHA1

    2098d73511a1daac926645cad8a7b5fec6cf7f47

  • SHA256

    e071f7aff74e187f07a9f1ee88eeac9be728447aad359a0cda32fe7b62228bec

  • SHA512

    31c9f5582872e4634751ef1ab52b0f8e57ec0408c78aaa1aeb7d6883ae0991416da3c5eaea27ca64b5c6eb5fde930f85acf4fa9c68485b546e528081d22a6156

  • SSDEEP

    1572864:wKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmExf:wKTWWMia0mDAUrEzvOG6T2e+f

Score
9/10

Malware Config

Targets

    • Target

      setup.exe

    • Size

      73.7MB

    • MD5

      02dde17be4c7a3dce827d28df8117e3c

    • SHA1

      2098d73511a1daac926645cad8a7b5fec6cf7f47

    • SHA256

      e071f7aff74e187f07a9f1ee88eeac9be728447aad359a0cda32fe7b62228bec

    • SHA512

      31c9f5582872e4634751ef1ab52b0f8e57ec0408c78aaa1aeb7d6883ae0991416da3c5eaea27ca64b5c6eb5fde930f85acf4fa9c68485b546e528081d22a6156

    • SSDEEP

      1572864:wKT3GWkokgm1Pia0dgTqHXwTvQ6GH0FBEJNJ5TOLOx7fSTtjIvmExf:wKTWWMia0mDAUrEzvOG6T2e+f

    Score
    9/10
    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks