General
-
Target
Setup3310.exe
-
Size
381KB
-
Sample
230516-17se8sch28
-
MD5
9b6051646052a21c4002dcd1bb973134
-
SHA1
a671b61746a7e6032f253008106d1b84cebca943
-
SHA256
b2b39d32315cb31d5799c2aa038fdbd3f973eac21ae210ad2bee07af130e7a81
-
SHA512
59995b1a08324362444469b0cc4f8cb87e2a83ccf189c9c7fb3574576d55fa10d4ef72c3459bce38d427c7450a825cfa682b7f524aaa71dcd7343948ae306440
-
SSDEEP
6144:x/QiQXCpoL8+Ee0CYDTAsdRBUiOGBfj/WUplm6zIOYQNd28pTXdAmpCLVRZoglMb:pQi3poL8+iDNdRailL//plmW9bTXeVh8
Static task
static1
Behavioral task
behavioral1
Sample
Setup3310.exe
Resource
win10v2004-20230220-en
Malware Config
Targets
-
-
Target
Setup3310.exe
-
Size
381KB
-
MD5
9b6051646052a21c4002dcd1bb973134
-
SHA1
a671b61746a7e6032f253008106d1b84cebca943
-
SHA256
b2b39d32315cb31d5799c2aa038fdbd3f973eac21ae210ad2bee07af130e7a81
-
SHA512
59995b1a08324362444469b0cc4f8cb87e2a83ccf189c9c7fb3574576d55fa10d4ef72c3459bce38d427c7450a825cfa682b7f524aaa71dcd7343948ae306440
-
SSDEEP
6144:x/QiQXCpoL8+Ee0CYDTAsdRBUiOGBfj/WUplm6zIOYQNd28pTXdAmpCLVRZoglMb:pQi3poL8+iDNdRailL//plmW9bTXeVh8
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-