Overview

overview

7

Static

static

1

agiledotne...er.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    agiledotnetinstaller.exe

  • Size

    13.8MB

  • Sample

    230325-2znmragf8x

  • MD5

    b18e08cd76a64f4311ede5dc0e094420

  • SHA1

    d4f015004fbaeeed2e7a90ef859d4b9f04b3dc20

  • SHA256

    7faf552bacfc8174d2e02142b7379948158c2eac09e4f1872f5dd5f847f8075b

  • SHA512

    f04fc41e0f15d84d45745f78e8eca629f037355be957c99643b3f7d2709a0063102369c7ca54e1b33dbba419770cbdc9a628be798dcbdb09e131fcc8f6c656c6

  • SSDEEP

    393216:PJmTb23oYK6+RF05k/NxDFKZQ0gzkb8HZDozeM2Zwb32n2KTeY:PJ+b24YMKS/NRu10Zz62n2/Y

Score
7/10
agilenetdiscovery

Malware Config

Targets

    • Target

      agiledotnetinstaller.exe

    • Size

      13.8MB

    • MD5

      b18e08cd76a64f4311ede5dc0e094420

    • SHA1

      d4f015004fbaeeed2e7a90ef859d4b9f04b3dc20

    • SHA256

      7faf552bacfc8174d2e02142b7379948158c2eac09e4f1872f5dd5f847f8075b

    • SHA512

      f04fc41e0f15d84d45745f78e8eca629f037355be957c99643b3f7d2709a0063102369c7ca54e1b33dbba419770cbdc9a628be798dcbdb09e131fcc8f6c656c6

    • SSDEEP

      393216:PJmTb23oYK6+RF05k/NxDFKZQ0gzkb8HZDozeM2Zwb32n2KTeY:PJ+b24YMKS/NRu10Zz62n2/Y

    Score
    7/10
    agilenetdiscovery

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

      agilenet

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks