Resubmissions

16-05-2023 22:17

230516-17se8sch28 7

12-04-2021 12:47

210412-vkz15xeqjj 10

General

  • Target

    Setup3310.exe

  • Size

    381KB

  • Sample

    230516-17se8sch28

  • MD5

    9b6051646052a21c4002dcd1bb973134

  • SHA1

    a671b61746a7e6032f253008106d1b84cebca943

  • SHA256

    b2b39d32315cb31d5799c2aa038fdbd3f973eac21ae210ad2bee07af130e7a81

  • SHA512

    59995b1a08324362444469b0cc4f8cb87e2a83ccf189c9c7fb3574576d55fa10d4ef72c3459bce38d427c7450a825cfa682b7f524aaa71dcd7343948ae306440

  • SSDEEP

    6144:x/QiQXCpoL8+Ee0CYDTAsdRBUiOGBfj/WUplm6zIOYQNd28pTXdAmpCLVRZoglMb:pQi3poL8+iDNdRailL//plmW9bTXeVh8

Score
7/10

Malware Config

Targets

    • Target

      Setup3310.exe

    • Size

      381KB

    • MD5

      9b6051646052a21c4002dcd1bb973134

    • SHA1

      a671b61746a7e6032f253008106d1b84cebca943

    • SHA256

      b2b39d32315cb31d5799c2aa038fdbd3f973eac21ae210ad2bee07af130e7a81

    • SHA512

      59995b1a08324362444469b0cc4f8cb87e2a83ccf189c9c7fb3574576d55fa10d4ef72c3459bce38d427c7450a825cfa682b7f524aaa71dcd7343948ae306440

    • SSDEEP

      6144:x/QiQXCpoL8+Ee0CYDTAsdRBUiOGBfj/WUplm6zIOYQNd28pTXdAmpCLVRZoglMb:pQi3poL8+iDNdRailL//plmW9bTXeVh8

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

MITRE ATT&CK Enterprise v6

Tasks