Overview

overview

8

Static

static

3

Setup.exe

windows7-x64

8

Setup.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup.exe

  • Size

    693.2MB

  • Sample

    230512-x2m2sagd8y

  • MD5

    1afd68147ac485753917930116210a40

  • SHA1

    8c8deec48a8a7c3d4e5af8e26e8b3d09decad08b

  • SHA256

    3988557312ceca76bee86e2df0c34f2cdc7b2dc370846ba8390ae1d36d61e900

  • SHA512

    4cd02d60b7f30c7b5e08e312330342c124c9fb4cda01ba99e8d765a4040ee7832760a25c1d9e32a5e5a3a4521a4bd2c2a75a6b48395f32da1959f2117dadeacb

  • SSDEEP

    12582912:bGbk9hNMUyBXnkRSuLBCF8WwX2VX0I/wY3jCMQRoMCb+RSGcYHqEtZF8:lM5XnVTSX2VX0I/fjCpob+RSGdx8

Score
8/10
persistence

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      693.2MB

    • MD5

      1afd68147ac485753917930116210a40

    • SHA1

      8c8deec48a8a7c3d4e5af8e26e8b3d09decad08b

    • SHA256

      3988557312ceca76bee86e2df0c34f2cdc7b2dc370846ba8390ae1d36d61e900

    • SHA512

      4cd02d60b7f30c7b5e08e312330342c124c9fb4cda01ba99e8d765a4040ee7832760a25c1d9e32a5e5a3a4521a4bd2c2a75a6b48395f32da1959f2117dadeacb

    • SSDEEP

      12582912:bGbk9hNMUyBXnkRSuLBCF8WwX2VX0I/wY3jCMQRoMCb+RSGcYHqEtZF8:lM5XnVTSX2VX0I/fjCpob+RSGdx8

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks