Overview

overview

8

Static

static

1

TeamsSetup...1).exe

windows7-x64

7

TeamsSetup...1).exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    TeamsSetup_c_w_ (1).exe

  • Size

    1.4MB

  • Sample

    230712-rqsj8see8v

  • MD5

    1db25ad763b0c754c7bc86e078d005d6

  • SHA1

    9fa700fa5c4fdcb710164fa9f99cebab61f09faf

  • SHA256

    73d9a1fc91debec990ab05bb907ab57e52d5e6a7894ff80da75e1a6cc076c31e

  • SHA512

    fd2e8a5a4041fa0a0bad808c1e6886073a4ef8267666064b3c9021562ed9227f5bb1b7a5953b3c7018cd819c48e1fba45853ba01171514504b6f4eab3a6a6962

  • SSDEEP

    24576:2NYuPOTryV7OXRnWl4bo5cOHxTrckA+K+K6zR6ZIV5jqzZVyHRe4L/7Z3mbK:uOX674Wb5HHx8WKF6zR7YZoHRe4LDZ3P

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      TeamsSetup_c_w_ (1).exe

    • Size

      1.4MB

    • MD5

      1db25ad763b0c754c7bc86e078d005d6

    • SHA1

      9fa700fa5c4fdcb710164fa9f99cebab61f09faf

    • SHA256

      73d9a1fc91debec990ab05bb907ab57e52d5e6a7894ff80da75e1a6cc076c31e

    • SHA512

      fd2e8a5a4041fa0a0bad808c1e6886073a4ef8267666064b3c9021562ed9227f5bb1b7a5953b3c7018cd819c48e1fba45853ba01171514504b6f4eab3a6a6962

    • SSDEEP

      24576:2NYuPOTryV7OXRnWl4bo5cOHxTrckA+K+K6zR6ZIV5jqzZVyHRe4L/7Z3mbK:uOX674Wb5HHx8WKF6zR7YZoHRe4LDZ3P

    Score
    8/10
    discoverypersistence

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks