Resubmissions

05-08-2024 04:04

240805-emxnkazgph 9

12-04-2023 16:03

230412-thg5msdc74 8

General

  • Target

    utweb_installer.exe

  • Size

    1.7MB

  • Sample

    230412-thg5msdc74

  • MD5

    f4f238302d3529b21c6a8bf9ed4f5276

  • SHA1

    c192e6a15db8f12a7a70e15477a5d984f581472f

  • SHA256

    52bbb9086d5e454b3606b20aaaf380c623f700d529fb6da788ffce78432d7d07

  • SHA512

    b587536d547a1186bd1d74ffb61675a1c1a3c67ca20e694eab94ba6f58fcf278a077c3b9598c9054807394439b8af94831686b4a233ed410814c4fd509b17a62

  • SSDEEP

    24576:P4nXubIQGyxbPV0db26wQeNuwWWAmCdqotxoBcXRGEtLi+F/WY4O5bI:Pqe3f60vxWlmCdqogBcvhtle

Malware Config

Targets

    • Target

      utweb_installer.exe

    • Size

      1.7MB

    • MD5

      f4f238302d3529b21c6a8bf9ed4f5276

    • SHA1

      c192e6a15db8f12a7a70e15477a5d984f581472f

    • SHA256

      52bbb9086d5e454b3606b20aaaf380c623f700d529fb6da788ffce78432d7d07

    • SHA512

      b587536d547a1186bd1d74ffb61675a1c1a3c67ca20e694eab94ba6f58fcf278a077c3b9598c9054807394439b8af94831686b4a233ed410814c4fd509b17a62

    • SSDEEP

      24576:P4nXubIQGyxbPV0db26wQeNuwWWAmCdqotxoBcXRGEtLi+F/WY4O5bI:Pqe3f60vxWlmCdqogBcvhtle

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks