General
-
Target
OpenRailsSetup.exe
-
Size
23.2MB
-
Sample
230331-wmcrtsde9x
-
MD5
8dffc24f78f71f2272c33f25be6b0be8
-
SHA1
a4a49f250f346c5793eecd538fe4e6bd81dc3d75
-
SHA256
52e5f6917d31474ec92aee87b32831011defaf0bdd2bfc52ac9272e929440b8f
-
SHA512
b8ab4a5476b40b95480471d7e4eac25dcd225c922aa357a1e6584af6d985a6efc7b39a32925b1db80a563fb81eb325b93155dd06d47053bb84fc24e6d81d654c
-
SSDEEP
393216:7XgdaUT5HaM0HhE3jI8oL8pW7C3QhvpGKxPpLUAUWzoMFcno6+OvXMO0VU3kLUTJ:7XgdR1muU8oQT38RxqWzp6o6+AP0VU+K
Static task
static1
Behavioral task
behavioral1
Sample
OpenRailsSetup.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
OpenRailsSetup.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
OpenRailsSetup.exe
-
Size
23.2MB
-
MD5
8dffc24f78f71f2272c33f25be6b0be8
-
SHA1
a4a49f250f346c5793eecd538fe4e6bd81dc3d75
-
SHA256
52e5f6917d31474ec92aee87b32831011defaf0bdd2bfc52ac9272e929440b8f
-
SHA512
b8ab4a5476b40b95480471d7e4eac25dcd225c922aa357a1e6584af6d985a6efc7b39a32925b1db80a563fb81eb325b93155dd06d47053bb84fc24e6d81d654c
-
SSDEEP
393216:7XgdaUT5HaM0HhE3jI8oL8pW7C3QhvpGKxPpLUAUWzoMFcno6+OvXMO0VU3kLUTJ:7XgdR1muU8oQT38RxqWzp6o6+AP0VU+K
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-