16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b | Triage

Resubmissions

10-02-2023 23:07

230210-24aaxsaa21 7

10-02-2023 23:03

230210-21x8ksad62 7

Sharing

General

Target

Solar-Tweaks-Setup-4.2.0.exe
Size

59.3MB
Sample

230210-21x8ksad62
MD5

dfdea5f4a771556305d2faef94c8cf18
SHA1

f0cbbd1a88c7ebbc84a8b68cbf695eead7273328
SHA256

16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b
SHA512

08ac72e28a3e621c05929bd8e0421975ca65749f0321d2eee163a16be7072ea0e81ad3d65bba7e455cedca33289f2aa6f6c5dfb42b45a627b95b3960db3b8642
SSDEEP

1572864:qy1s9ggeDH7QDv2zFZJTCT6MR9L0T+wKseEc:qy1sHYcL2zfNwbnLbdEc

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  Solar-Tweaks-Setup-4.2.0.exe
- Size
  
  59.3MB
- MD5
  
  dfdea5f4a771556305d2faef94c8cf18
- SHA1
  
  f0cbbd1a88c7ebbc84a8b68cbf695eead7273328
- SHA256
  
  16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b
- SHA512
  
  08ac72e28a3e621c05929bd8e0421975ca65749f0321d2eee163a16be7072ea0e81ad3d65bba7e455cedca33289f2aa6f6c5dfb42b45a627b95b3960db3b8642
- SSDEEP
  
  1572864:qy1s9ggeDH7QDv2zFZJTCT6MR9L0T+wKseEc:qy1sHYcL2zfNwbnLbdEc
Score

7^/10

discovery
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2