General

  • Target

    Setup64.exe

  • Size

    8.0MB

  • Sample

    230331-ylbt9ada22

  • MD5

    1cb0c517220253564af5702918929487

  • SHA1

    3d95c566c8f773abd0ff18ff73f097d7eb61dc83

  • SHA256

    938275f201c537e5dc28833645bec58885e3e69d9dc1cd38e611d2977959f405

  • SHA512

    400be5903f60a839418c3f9a173604d0b32e0cb741597268288d2e222ada60de1016432a3c3db8e45bad67210c68339056477a91c8c7ee9468624b92b30d51b0

  • SSDEEP

    196608:ffgwOpYPwsTyxbeAi7jmye1fOEfuP++iZpXUg/33JHey:IYPAxCp7jRyfOPiZpXl3JHey

Score
7/10

Malware Config

Targets

    • Target

      Setup64.exe

    • Size

      8.0MB

    • MD5

      1cb0c517220253564af5702918929487

    • SHA1

      3d95c566c8f773abd0ff18ff73f097d7eb61dc83

    • SHA256

      938275f201c537e5dc28833645bec58885e3e69d9dc1cd38e611d2977959f405

    • SHA512

      400be5903f60a839418c3f9a173604d0b32e0cb741597268288d2e222ada60de1016432a3c3db8e45bad67210c68339056477a91c8c7ee9468624b92b30d51b0

    • SSDEEP

      196608:ffgwOpYPwsTyxbeAi7jmye1fOEfuP++iZpXUg/33JHey:IYPAxCp7jRyfOPiZpXl3JHey

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Discovery

Query Registry

5
T1012

System Information Discovery

5
T1082

Tasks