Overview

overview

8

Static

static

7

PrimalClie...IX.exe

windows10-2004-x64

8

Resubmissions

06/06/2023, 21:56

230606-1ts5lsgd7w 8

06/06/2023, 21:56

230606-1tcsmafg88 7

06/06/2023, 21:54

230606-1sgp7afg86 7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    PrimalClient-V2_FREE_FIX.exe

  • Size

    4.4MB

  • Sample

    230606-1ts5lsgd7w

  • MD5

    113f2d267a119e6ed76b865c14e10908

  • SHA1

    59a548e235a5d4f5ace62673659ad18e85cbe8fd

  • SHA256

    9eb0e6014c8aa7f8222b3b5959648bb1addaf00ac873ae253d62ba57dca0b473

  • SHA512

    e2ef9ff60e2b4c502310e0a81ff8673f2bd7fecce38687c1a9f1e60170e8cbf9bab7615a89455b685a1df310e95b15041b38b37072129d5c0f47b4409917001a

  • SSDEEP

    98304:i0x63CAXVQvgRJRE/jU59A5Lg4r2t1ehkLa3dhkiDFmL43mhYE1d8:i0xQCU3ROVrUeh/FDt2aEQ

Score
8/10
persistencethemida

Malware Config

Targets

    • Target

      PrimalClient-V2_FREE_FIX.exe

    • Size

      4.4MB

    • MD5

      113f2d267a119e6ed76b865c14e10908

    • SHA1

      59a548e235a5d4f5ace62673659ad18e85cbe8fd

    • SHA256

      9eb0e6014c8aa7f8222b3b5959648bb1addaf00ac873ae253d62ba57dca0b473

    • SHA512

      e2ef9ff60e2b4c502310e0a81ff8673f2bd7fecce38687c1a9f1e60170e8cbf9bab7615a89455b685a1df310e95b15041b38b37072129d5c0f47b4409917001a

    • SSDEEP

      98304:i0x63CAXVQvgRJRE/jU59A5Lg4r2t1ehkLa3dhkiDFmL43mhYE1d8:i0xQCU3ROVrUeh/FDt2aEQ

    Score
    8/10
    persistencethemida

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

      themida

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks