Overview

overview

7

Static

static

1

FileMenuTo...up.exe

windows7-x64

FileMenuTo...up.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    FileMenuTools-setup.exe

  • Size

    11.2MB

  • Sample

    230314-t696bsae8s

  • MD5

    5bec5683414cd92912e1db22260e2b64

  • SHA1

    ab5188e4c64b568683648974741ceef7a655c319

  • SHA256

    5eadcb607000f8d619fd021b4136867c0268cb563452c62430f6ddb217484af3

  • SHA512

    edafc25159de351ae2f365763fc616bf696da92fcfe07c2e87494896152b51d6ca3823a9cbdbc2bc2906c0543435f048025fab66af898db9db768c5676dc3a6a

  • SSDEEP

    196608:jfxZbtHGrXzEBa6StmDdLyqVgbbw8o5ofFCEFcU1EQdtdH1v6ze5D93xRsqvCW/C:bjtqz6a6FPCbGezFb1ltdHlKiDxFvC4C

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      FileMenuTools-setup.exe

    • Size

      11.2MB

    • MD5

      5bec5683414cd92912e1db22260e2b64

    • SHA1

      ab5188e4c64b568683648974741ceef7a655c319

    • SHA256

      5eadcb607000f8d619fd021b4136867c0268cb563452c62430f6ddb217484af3

    • SHA512

      edafc25159de351ae2f365763fc616bf696da92fcfe07c2e87494896152b51d6ca3823a9cbdbc2bc2906c0543435f048025fab66af898db9db768c5676dc3a6a

    • SSDEEP

      196608:jfxZbtHGrXzEBa6StmDdLyqVgbbw8o5ofFCEFcU1EQdtdH1v6ze5D93xRsqvCW/C:bjtqz6a6FPCbGezFb1ltdHlKiDxFvC4C

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks