General

  • Target

    Password Cracker_4.26.exe

  • Size

    4.0MB

  • Sample

    230416-kj61qabb8s

  • MD5

    b67a13a4e25cf4cec8b2bbacef5c17ad

  • SHA1

    4192f03245e839e822a1897c5f3dcd60edd673b8

  • SHA256

    728d9e8da260da76ebe373d84e3351eba1b13eb4e7fb13c17dec02c1c9747241

  • SHA512

    be9ac3179d0b1644b440cd4abe79eed4269c677d461413459b82a396c7cb9b9109d53885bea11c03c56cfd528e13f59907fcacaf9c7865bdf08d4d376d15654b

  • SSDEEP

    98304:+m/RjCO4YllEoGmEZuXs6YyqAFL4a6Nj0uNvbvVv/HMqy631:+YjP4GGDkYyL4fNj0AbFb1

Score
7/10

Malware Config

Targets

    • Target

      Password Cracker_4.26.exe

    • Size

      4.0MB

    • MD5

      b67a13a4e25cf4cec8b2bbacef5c17ad

    • SHA1

      4192f03245e839e822a1897c5f3dcd60edd673b8

    • SHA256

      728d9e8da260da76ebe373d84e3351eba1b13eb4e7fb13c17dec02c1c9747241

    • SHA512

      be9ac3179d0b1644b440cd4abe79eed4269c677d461413459b82a396c7cb9b9109d53885bea11c03c56cfd528e13f59907fcacaf9c7865bdf08d4d376d15654b

    • SSDEEP

      98304:+m/RjCO4YllEoGmEZuXs6YyqAFL4a6Nj0uNvbvVv/HMqy631:+YjP4GGDkYyL4fNj0AbFb1

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v6

Tasks