General

  • Target

    pw10-free.exe

  • Size

    44.8MB

  • Sample

    230603-ykpdyshh65

  • MD5

    c05e56bc088417bcb784fac6c9f3221a

  • SHA1

    d6bb31034cde6dbfbaf08c42d9b10d4255fb6910

  • SHA256

    b09edaf7979459b1cc3be2f38f6c47c352443d31a81d774d24cb0d614407873a

  • SHA512

    966ccbf808cd79c5f0755778d43a1291e9691df8961d6d613aa7bd8be34f62ba44634b9c289fd5f9aedc1da38ec0b7c6bac5f26ae45926a709a835c1ffc97605

  • SSDEEP

    786432:a2BUoMqq1xrhwmUb/Wl6PkbAQ1wxjQC0Bwd1L6F2Ai4rTI4zwdeXwf9T/p:VrkDm/kW/nxjw0kvQYXaL

Score
7/10

Malware Config

Targets

    • Target

      pw10-free.exe

    • Size

      44.8MB

    • MD5

      c05e56bc088417bcb784fac6c9f3221a

    • SHA1

      d6bb31034cde6dbfbaf08c42d9b10d4255fb6910

    • SHA256

      b09edaf7979459b1cc3be2f38f6c47c352443d31a81d774d24cb0d614407873a

    • SHA512

      966ccbf808cd79c5f0755778d43a1291e9691df8961d6d613aa7bd8be34f62ba44634b9c289fd5f9aedc1da38ec0b7c6bac5f26ae45926a709a835c1ffc97605

    • SSDEEP

      786432:a2BUoMqq1xrhwmUb/Wl6PkbAQ1wxjQC0Bwd1L6F2Ai4rTI4zwdeXwf9T/p:VrkDm/kW/nxjw0kvQYXaL

    Score
    7/10
    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks