Overview

overview

8

Static

static

1

TeamViewer...1).exe

windows7-x64

8

TeamViewer...1).exe

windows10-2004-x64

4

Resubmissions

17/05/2023, 08:17

230517-j6s7psec49 8

17/05/2023, 08:13

230517-j4qnssdc7y 7

Sharing

Copy URL Twitter E-mail

General

  • Target

    TeamViewer_Setup_x64 (1).exe

  • Size

    44.2MB

  • Sample

    230517-j6s7psec49

  • MD5

    cb7e56db8673ec2dfd7251c714065b1e

  • SHA1

    0ca338e4358fb1ab623fbb05b5fbb52fdb44f933

  • SHA256

    5f5a917cf37a1e2eadc542b07aeae063c39cbe27b38490636ff23205276bb186

  • SHA512

    8466781d4b30edc9a7da22adf5b84cced83fe979c886925bf5d0abf3806173f86c020e6d3fbbdcfd39a31ec94e732649cf9bb409f72d19b4eaaeb1b73003d7db

  • SSDEEP

    786432:CWUm+R13L+X9j/OavlN5Ntc8oqzw3qh2suhevFGjr7uh+R+Hm:xUbql/OavlN5NteI2su0Ijr6i+G

Score
8/10
discoverypersistencespywarestealerupx

Malware Config

Targets

    • Target

      TeamViewer_Setup_x64 (1).exe

    • Size

      44.2MB

    • MD5

      cb7e56db8673ec2dfd7251c714065b1e

    • SHA1

      0ca338e4358fb1ab623fbb05b5fbb52fdb44f933

    • SHA256

      5f5a917cf37a1e2eadc542b07aeae063c39cbe27b38490636ff23205276bb186

    • SHA512

      8466781d4b30edc9a7da22adf5b84cced83fe979c886925bf5d0abf3806173f86c020e6d3fbbdcfd39a31ec94e732649cf9bb409f72d19b4eaaeb1b73003d7db

    • SSDEEP

      786432:CWUm+R13L+X9j/OavlN5Ntc8oqzw3qh2suhevFGjr7uh+R+Hm:xUbql/OavlN5NteI2su0Ijr6i+G

    Score
    8/10
    discoverypersistencespywarestealerupx

    • Drops file in Drivers directory

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks