Overview

overview

8

Static

static

1

cav_instal...17.exe

windows7-x64

8

cav_instal...17.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    cav_installer_10387_17.exe

  • Size

    5.4MB

  • Sample

    230701-gf7lasgf6x

  • MD5

    7be4a95313c926e0233571f89291f487

  • SHA1

    a16e410af1f001434d5ed5194f0755aa24173589

  • SHA256

    4e3da75745b7e4887965862b11ba68bc7aadf3ea000636554dfc8f0b8e3261ae

  • SHA512

    31df4d21db3ddaa96a7f2492572660990621050dc74ec56fe6eca725cc2d9beb63f8b74f8c8ffc85f42fcc32540117f97b9235f0d6256f10e1da7819b5d940bc

  • SSDEEP

    98304:23oeoi7dSeyB6A89FbeCD25kvriejkx9sZjMK6vx6IF/M8aWzBWcPNkNzt/c:23oeoYSeyB6vnKCD25kvmeh6vFF//aF0

Score
8/10
spywarestealer

Malware Config

Targets

    • Target

      cav_installer_10387_17.exe

    • Size

      5.4MB

    • MD5

      7be4a95313c926e0233571f89291f487

    • SHA1

      a16e410af1f001434d5ed5194f0755aa24173589

    • SHA256

      4e3da75745b7e4887965862b11ba68bc7aadf3ea000636554dfc8f0b8e3261ae

    • SHA512

      31df4d21db3ddaa96a7f2492572660990621050dc74ec56fe6eca725cc2d9beb63f8b74f8c8ffc85f42fcc32540117f97b9235f0d6256f10e1da7819b5d940bc

    • SSDEEP

      98304:23oeoi7dSeyB6A89FbeCD25kvriejkx9sZjMK6vx6IF/M8aWzBWcPNkNzt/c:23oeoYSeyB6vnKCD25kvmeh6vFF//aF0

    Score
    8/10
    spywarestealer

    • Downloads MZ/PE file

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Checks for any installed AV software in registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks