Resubmissions

14/03/2023, 14:39

230314-r1jp3sga54 8

14/03/2023, 14:30

230314-rvkeeshh5z 8

General

  • Target

    b5d5e7e8a951e96e88215ca140c04b892e2d53de.zip

  • Size

    1.2MB

  • Sample

    230314-rvkeeshh5z

  • MD5

    723b5e23458b7915c00e87108b2ba601

  • SHA1

    5a29d03228c85d7078cb3d79347c0a190b1573f8

  • SHA256

    8f227bc5da1de26c1458babeaef1855429e956a4d6fd086140ee356267a5dc77

  • SHA512

    a65600ad70c9815afecbf89eafc15556b1a535d67d847d9a08fca8c4bac4c309d60d748c071061e76ffeb487f15246b9b3d3f3c1e22a6f7f01a87ca9c36f0f0a

  • SSDEEP

    24576:u/Y0Ar5oCgs8kguzEeO74Z90s+1dLarhtqhcykFv:2qgnurE4ZOsadLaHqhcykFv

Score
8/10

Malware Config

Targets

    • Target

      inno-setup-5.6.0-installer_M1-nMK1.exe

    • Size

      1.7MB

    • MD5

      41ae06d18ed5af6e6a0a4568b6bb7cc4

    • SHA1

      b5d5e7e8a951e96e88215ca140c04b892e2d53de

    • SHA256

      a350cd18e1b18c350088512a4baeaeb0ce8ae7e2bfae80636c61c5ba17103b04

    • SHA512

      81228bac5babd3c602804bea5e1c1f9c4d97ddb7896aec6bcea14ef8cd34b83c5ddcc63a6c3a257698910663e2dfd85355a461ea5d02ceefaa2e25cead16c166

    • SSDEEP

      24576:Y7FUDowAyrTVE3U5Fmi05np8tydyPaJPfrT90eKc4cgFLNPfs8duMpmsDGB:YBuZrEUOp8odywPH9RHgFLRdp/M

    Score
    8/10
    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks