Overview

overview

8

Static

static

1

3CXDesktop...13.msi

windows10-1703-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3CXDesktopApp-18.11.1213.msi

  • Size

    97.4MB

  • Sample

    230531-ba6txscf4z

  • MD5

    20a680ee3826a8cb316a7bed58eb31c3

  • SHA1

    78d955ae7ae0262a67c22f694f26ea5328355cf7

  • SHA256

    75233320f01b1d60583cc0b5ba6774fc6ae78e5a242fd6174c20633e35acbd25

  • SHA512

    aed30810d434f144dc746209b97b4ac8ee480cf736dc153fcd213027af693b6682fae150d9e33df7001cf810ee7e39c2a63cdf7d0c0fb2186eb4ab55a78d51f0

  • SSDEEP

    3145728:f87dJ+NGEcpXmCj1kC9O8mwdUyI5556keA:wJ+NzKmCOCKcIx6

Score
8/10
persistence

Malware Config

Targets

    • Target

      3CXDesktopApp-18.11.1213.msi

    • Size

      97.4MB

    • MD5

      20a680ee3826a8cb316a7bed58eb31c3

    • SHA1

      78d955ae7ae0262a67c22f694f26ea5328355cf7

    • SHA256

      75233320f01b1d60583cc0b5ba6774fc6ae78e5a242fd6174c20633e35acbd25

    • SHA512

      aed30810d434f144dc746209b97b4ac8ee480cf736dc153fcd213027af693b6682fae150d9e33df7001cf810ee7e39c2a63cdf7d0c0fb2186eb4ab55a78d51f0

    • SSDEEP

      3145728:f87dJ+NGEcpXmCj1kC9O8mwdUyI5556keA:wJ+NzKmCOCKcIx6

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks