Overview

overview

8

Static

static

aTube_Catc....4.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    aTube_Catcher_v0.03.059.447.4.exe

  • Size

    1.1MB

  • Sample

    221227-w851haba3z

  • MD5

    bf1c147ca45943073d8b02ce2491e787

  • SHA1

    ebeea33ef69b6002504ee42c04d7b2ed44b312ff

  • SHA256

    504ec3e3b3c8d6d294ced5ec1cf840f2b973ab823a47d167800e51cfa635af47

  • SHA512

    273e1bf12efd15714b4d3e2768349f5b00b91abc7d6d65814bc8410a168161b8d87cc2ca65f1a3371ed0f2571986dff8ab861a11522334aa439c151a0a7d157d

  • SSDEEP

    24576:vKAeRQi7A0S+K7VQy6yXiJC0ABKPamoLi+t9RQAP1Ehl3qw0S+K7VQy6yXiJC0Az:vLemmA0S+K7VQy6yXiJC0ABKXii+t9Rh

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      aTube_Catcher_v0.03.059.447.4.exe

    • Size

      1.1MB

    • MD5

      bf1c147ca45943073d8b02ce2491e787

    • SHA1

      ebeea33ef69b6002504ee42c04d7b2ed44b312ff

    • SHA256

      504ec3e3b3c8d6d294ced5ec1cf840f2b973ab823a47d167800e51cfa635af47

    • SHA512

      273e1bf12efd15714b4d3e2768349f5b00b91abc7d6d65814bc8410a168161b8d87cc2ca65f1a3371ed0f2571986dff8ab861a11522334aa439c151a0a7d157d

    • SSDEEP

      24576:vKAeRQi7A0S+K7VQy6yXiJC0ABKPamoLi+t9RQAP1Ehl3qw0S+K7VQy6yXiJC0Az:vLemmA0S+K7VQy6yXiJC0ABKXii+t9Rh

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks