Overview

overview

10

Static

static

3

ATLauncher....0.exe

windows7-x64

7

ATLauncher....0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ATLauncher-setup-1.1.0.0.exe

  • Size

    2.6MB

  • Sample

    230630-dkejjafh92

  • MD5

    2f9d674c4b426de69d4229c7778d88c4

  • SHA1

    9d75fdd18d4c32bc93c6c828ac3b4019db1f0931

  • SHA256

    28272caadd4df846e1f19ca4c5932fa3ec0348f0e36a8e1395a30b2a005c7656

  • SHA512

    fc9a5a6cb89cc61666055248391c54a2f5c0845dda72bbdbf469d3679c26b3546b7ab048c68ceeaa9f507e10ac4f83402a5303b58a465f1010608a02ec6c728f

  • SSDEEP

    24576:k7FUDowAyrTVE3U5F349LBNaSG0b79VFVoCxQQMkcxVyMhqrHzEhbjRN8lTRa7I3:kBuZrEU89tRGu79DOHfkMhqgJjvWasrj

Score
10/10
discoveryevasion

Malware Config

Targets

    • Target

      ATLauncher-setup-1.1.0.0.exe

    • Size

      2.6MB

    • MD5

      2f9d674c4b426de69d4229c7778d88c4

    • SHA1

      9d75fdd18d4c32bc93c6c828ac3b4019db1f0931

    • SHA256

      28272caadd4df846e1f19ca4c5932fa3ec0348f0e36a8e1395a30b2a005c7656

    • SHA512

      fc9a5a6cb89cc61666055248391c54a2f5c0845dda72bbdbf469d3679c26b3546b7ab048c68ceeaa9f507e10ac4f83402a5303b58a465f1010608a02ec6c728f

    • SSDEEP

      24576:k7FUDowAyrTVE3U5F349LBNaSG0b79VFVoCxQQMkcxVyMhqrHzEhbjRN8lTRa7I3:kBuZrEU89tRGu79DOHfkMhqgJjvWasrj

    Score
    10/10
    discoveryevasion

    • Modifies visibility of file extensions in Explorer

      evasion

    • Modifies visiblity of hidden/system files in Explorer

      evasion

    • Downloads MZ/PE file

    • Modifies RDP port number used by Windows

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks