General

  • Target

    Install.exe

  • Size

    14.2MB

  • Sample

    230617-ztqttada46

  • MD5

    72b7a3fedc5bceff15eb88d70dd8c9e2

  • SHA1

    8723bcebfed76a929933d4520af52393482046c0

  • SHA256

    356638897981c9192c8baa96c391748c0ae7410d0cac78c9d7713fd5ce415989

  • SHA512

    1d5d94157dcb90ec058779724f0c622376303c76abe2459ea939d9d822b18dd532870e58bd59ff584b17e9ffd4d330e6ac67efb1feadabfdcc50057ebc28605c

  • SSDEEP

    196608:ObcUG4raKu24YY7HVT4hV0AD6QgqKRgXabcUG4raKu24YY7HVT4hV0AD6QgqKRgX:8mKr4YYH+EUWpgXAmKr4YYH+EUWpgX

Score
10/10

Malware Config

Targets

    • Target

      Install.exe

    • Size

      14.2MB

    • MD5

      72b7a3fedc5bceff15eb88d70dd8c9e2

    • SHA1

      8723bcebfed76a929933d4520af52393482046c0

    • SHA256

      356638897981c9192c8baa96c391748c0ae7410d0cac78c9d7713fd5ce415989

    • SHA512

      1d5d94157dcb90ec058779724f0c622376303c76abe2459ea939d9d822b18dd532870e58bd59ff584b17e9ffd4d330e6ac67efb1feadabfdcc50057ebc28605c

    • SSDEEP

      196608:ObcUG4raKu24YY7HVT4hV0AD6QgqKRgXabcUG4raKu24YY7HVT4hV0AD6QgqKRgX:8mKr4YYH+EUWpgXAmKr4YYH+EUWpgX

    Score
    10/10
    • UAC bypass

    • Obfuscated with Agile.Net obfuscator

      Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v6

Tasks