Resubmissions

03/03/2023, 00:00

230303-aangxafd82 8

02/03/2023, 23:30

230302-3g5nzsfd23 8

General

  • Target

    AdobeSetup-ad0dee9f3297e629bbd17af9a205e2bb.msi

  • Size

    113.2MB

  • Sample

    230303-aangxafd82

  • MD5

    ad0dee9f3297e629bbd17af9a205e2bb

  • SHA1

    7be49f8db5125781615fc7891d6b9e22fc059d1c

  • SHA256

    10f73e09b925c17ce6e56571c9878f6312392d55898ee4901b983d42760e2292

  • SHA512

    9fb16a419245ce0cc39aaadad8763ac8e3fc1f23909b1e119d64a3311692120c2487cda283e0fccb5e439a8929f79b2aa637bb9ee207aa9a9b4bea8863017d5a

  • SSDEEP

    3145728:xVL3QdnY0N97z+CX6EWxZ1qOOxVZj2g/V:/3QdY0Pz+CWCOO7ZjdV

Score
8/10

Malware Config

Targets

    • Target

      AdobeSetup-ad0dee9f3297e629bbd17af9a205e2bb.msi

    • Size

      113.2MB

    • MD5

      ad0dee9f3297e629bbd17af9a205e2bb

    • SHA1

      7be49f8db5125781615fc7891d6b9e22fc059d1c

    • SHA256

      10f73e09b925c17ce6e56571c9878f6312392d55898ee4901b983d42760e2292

    • SHA512

      9fb16a419245ce0cc39aaadad8763ac8e3fc1f23909b1e119d64a3311692120c2487cda283e0fccb5e439a8929f79b2aa637bb9ee207aa9a9b4bea8863017d5a

    • SSDEEP

      3145728:xVL3QdnY0N97z+CX6EWxZ1qOOxVZj2g/V:/3QdY0Pz+CWCOO7ZjdV

    Score
    8/10
    • Blocklisted process makes network request

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v6

Tasks