Resubmissions

10/02/2023, 21:32

230210-1d1jraeb35 8

10/02/2023, 21:07

230210-zyay6adb25 7

General

  • Target

    setups.exe

  • Size

    1.4MB

  • Sample

    230210-1d1jraeb35

  • MD5

    fdb2b2e3add6b60243cd5a0deddc918d

  • SHA1

    82cd9af98586fe3b3795c0303adec1f6f98f91f2

  • SHA256

    909b98984b1a92a2adde3d52f28d1b2f2928c48c26e89402e9d4547352dbcfb0

  • SHA512

    6717ffa37da2b401587d418cc7b8fe5b2954795706824ae4c66c88d91540bb39e1bf3e4f7473caca4b259beb3c6113a3c9c6167c9959749ac556078ea961808b

  • SSDEEP

    24576:VafU6D0tIbNJWFxoLKzI2iecM1BLIyhMgaXLvT3/FdkaZ:VsLkd0afFcM7LthDeTtdD

Malware Config

Targets

    • Target

      setups.exe

    • Size

      1.4MB

    • MD5

      fdb2b2e3add6b60243cd5a0deddc918d

    • SHA1

      82cd9af98586fe3b3795c0303adec1f6f98f91f2

    • SHA256

      909b98984b1a92a2adde3d52f28d1b2f2928c48c26e89402e9d4547352dbcfb0

    • SHA512

      6717ffa37da2b401587d418cc7b8fe5b2954795706824ae4c66c88d91540bb39e1bf3e4f7473caca4b259beb3c6113a3c9c6167c9959749ac556078ea961808b

    • SSDEEP

      24576:VafU6D0tIbNJWFxoLKzI2iecM1BLIyhMgaXLvT3/FdkaZ:VsLkd0afFcM7LthDeTtdD

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks