Overview

overview

8

Static

static

3

setup.exe

windows7-x64

8

setup.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    setup.exe

  • Size

    5.3MB

  • Sample

    230717-rwce7sce99

  • MD5

    ea4e417a39e08456616236317f1de71c

  • SHA1

    9da716ccfcc259d2d97aed335e3c6519f736d2ae

  • SHA256

    0f22fab40e78ca09a0c8061f5670bab89cf844a80809e9d44b2ee43df8d5d368

  • SHA512

    270cfebe6184a6b22d21d7c5ca36158c7a8afcbcd5187bfd0d71394da0d357e67f6888ebd2b9c39ea6557e8521f22bbd62168eb255d80ccc85a0977390ea7fb6

  • SSDEEP

    98304:jf7wCQInrje/CAVMJy1W+xe7i0iewsclxgVZGnz0qGcmpelN:jfn6/VSl+xWusYxiGnwqGcGef

Score
8/10
discovery

Malware Config

Targets

    • Target

      setup.exe

    • Size

      5.3MB

    • MD5

      ea4e417a39e08456616236317f1de71c

    • SHA1

      9da716ccfcc259d2d97aed335e3c6519f736d2ae

    • SHA256

      0f22fab40e78ca09a0c8061f5670bab89cf844a80809e9d44b2ee43df8d5d368

    • SHA512

      270cfebe6184a6b22d21d7c5ca36158c7a8afcbcd5187bfd0d71394da0d357e67f6888ebd2b9c39ea6557e8521f22bbd62168eb255d80ccc85a0977390ea7fb6

    • SSDEEP

      98304:jf7wCQInrje/CAVMJy1W+xe7i0iewsclxgVZGnz0qGcmpelN:jfn6/VSl+xWusYxiGnwqGcGef

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks