Overview

overview

8

Static

static

3

RCO2Installer.exe

windows7-x64

8

RCO2Installer.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RCO2Installer.exe

  • Size

    706KB

  • Sample

    230506-mlv3caba8w

  • MD5

    30998e1e3fc08e5d558f8a5a7a4f90b7

  • SHA1

    0a429c9274d381f3e422d95ca6f65fa8804731cf

  • SHA256

    df979e95e56c2023e0fc3342fededa880fad95b47f9b7ee6e7133c89017be581

  • SHA512

    24b809f61dfd603be297503fb2d60d019406eeaa1b3bbb8e6dcd6dbb07d4ad9be8ec7c94518b7878389f46a9eab58122100d4b8f9c0f4531ee51df9d5e0aac18

  • SSDEEP

    12288:vQ1i1+PndRAV0Z/VTEMm1cLPgpUrZCjiFSDjkZ1wvUf0mcOnfhqz9nq:vQ12V0Z/V3m1cLWUtDFSxQD1JCQ

Score
8/10
persistence

Malware Config

Targets

    • Target

      RCO2Installer.exe

    • Size

      706KB

    • MD5

      30998e1e3fc08e5d558f8a5a7a4f90b7

    • SHA1

      0a429c9274d381f3e422d95ca6f65fa8804731cf

    • SHA256

      df979e95e56c2023e0fc3342fededa880fad95b47f9b7ee6e7133c89017be581

    • SHA512

      24b809f61dfd603be297503fb2d60d019406eeaa1b3bbb8e6dcd6dbb07d4ad9be8ec7c94518b7878389f46a9eab58122100d4b8f9c0f4531ee51df9d5e0aac18

    • SSDEEP

      12288:vQ1i1+PndRAV0Z/VTEMm1cLPgpUrZCjiFSDjkZ1wvUf0mcOnfhqz9nq:vQ12V0Z/V3m1cLWUtDFSxQD1JCQ

    Score
    8/10
    persistence

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks