Overview

overview

7

Static

static

3

pylote_setup.exe

windows7-x64

7

pylote_setup.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    pylote_setup.exe

  • Size

    3.4MB

  • Sample

    230522-rh3p8sgh89

  • MD5

    c85332561282613f8366efd5c9e92a3f

  • SHA1

    7564428ceb9721f6ce690bce1bcf974f452b7770

  • SHA256

    2f66bb2fc3509d80719b831eec513de9820c49446c85d48f8e5724918d073bb3

  • SHA512

    bb01961ac91a54770cd34a0c9e7595ac72bc85cb57d8a5f0388c86f7357f7bc50dabc3ebbe0655168143a94fae12e8797a455378bc788bc0e906b2625c497906

  • SSDEEP

    98304:JE78Wla/1ymxpgPBpdyUyUZMYo7Yo8C4Esgy:QvmxpgPBpgd9R8ztD

Score
7/10
discovery

Malware Config

Targets

    • Target

      pylote_setup.exe

    • Size

      3.4MB

    • MD5

      c85332561282613f8366efd5c9e92a3f

    • SHA1

      7564428ceb9721f6ce690bce1bcf974f452b7770

    • SHA256

      2f66bb2fc3509d80719b831eec513de9820c49446c85d48f8e5724918d073bb3

    • SHA512

      bb01961ac91a54770cd34a0c9e7595ac72bc85cb57d8a5f0388c86f7357f7bc50dabc3ebbe0655168143a94fae12e8797a455378bc788bc0e906b2625c497906

    • SSDEEP

      98304:JE78Wla/1ymxpgPBpdyUyUZMYo7Yo8C4Esgy:QvmxpgPBpgd9R8ztD

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks