Overview

overview

7

Static

static

1

aTube_Catc...91.exe

windows7-x64

7

aTube_Catc...91.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    aTube_Catcher_FREE_9991.exe

  • Size

    24.1MB

  • Sample

    230318-t8ga2afa6w

  • MD5

    eec82d625010a7a177035dc6d7540824

  • SHA1

    3ff6ef5202a0b2d35d7509f703e3ae6d79305acd

  • SHA256

    61c11fd68de2448e1c396b811052766d4dbaf1812079b0b5278478eda367efb0

  • SHA512

    0ceabe9034c87149148d47e5302a1ee2a33b0739c897d6c51a7ea865db7fdbcf23ce0599f7155820a92948f7522e2c4a7acff0a9b4e7fe48d4e0eeeda427ef94

  • SSDEEP

    393216:AdrXnY1guAEElI9BUfibFyqpYCD8apON5AtWPm/v7xltQ/UiZdmuSngSLcGKrRi:iygx4UypVxpQAtKmHrtPBnRLcGKrRi

Score
7/10
discoverypersistence

Malware Config

Targets

    • Target

      aTube_Catcher_FREE_9991.exe

    • Size

      24.1MB

    • MD5

      eec82d625010a7a177035dc6d7540824

    • SHA1

      3ff6ef5202a0b2d35d7509f703e3ae6d79305acd

    • SHA256

      61c11fd68de2448e1c396b811052766d4dbaf1812079b0b5278478eda367efb0

    • SHA512

      0ceabe9034c87149148d47e5302a1ee2a33b0739c897d6c51a7ea865db7fdbcf23ce0599f7155820a92948f7522e2c4a7acff0a9b4e7fe48d4e0eeeda427ef94

    • SSDEEP

      393216:AdrXnY1guAEElI9BUfibFyqpYCD8apON5AtWPm/v7xltQ/UiZdmuSngSLcGKrRi:iygx4UypVxpQAtKmHrtPBnRLcGKrRi

    Score
    7/10
    discoverypersistence

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

1
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

3
T1012

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks