Overview

overview

8

Static

static

1

RapportSetup.exe

windows7-x64

1

RapportSetup.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    RapportSetup.exe

  • Size

    524KB

  • Sample

    230830-hp5nqsac66

  • MD5

    843c2a10b0b9a9fb605621e95ee1a3ad

  • SHA1

    802a040ca8d849f2b773f80ca5ed507cd09d4573

  • SHA256

    aafc888b0e064d857bd9b8fc97dd3281ef0aafac520c46d51663ecc70e409e29

  • SHA512

    e337e1bd43b6527580574c25365c55a5a00f2520e34562185ddec9f07fb64947c2deba6147f50de4e16ec065347b847a86df3872be94f76dde04a40180e04282

  • SSDEEP

    6144:ufzK/fENm2eK7mnoUSgpAY8ODcDcm7cIsAG6fpUqtjKDr0aQ0afOAO/ykcpyKBoZ:eG/qG6fpUqtj00pOVioGPriP

Score
8/10
persistencespywarestealer

Malware Config

Targets

    • Target

      RapportSetup.exe

    • Size

      524KB

    • MD5

      843c2a10b0b9a9fb605621e95ee1a3ad

    • SHA1

      802a040ca8d849f2b773f80ca5ed507cd09d4573

    • SHA256

      aafc888b0e064d857bd9b8fc97dd3281ef0aafac520c46d51663ecc70e409e29

    • SHA512

      e337e1bd43b6527580574c25365c55a5a00f2520e34562185ddec9f07fb64947c2deba6147f50de4e16ec065347b847a86df3872be94f76dde04a40180e04282

    • SSDEEP

      6144:ufzK/fENm2eK7mnoUSgpAY8ODcDcm7cIsAG6fpUqtjKDr0aQ0afOAO/ykcpyKBoZ:eG/qG6fpUqtj00pOVioGPriP

    Score
    8/10
    persistencespywarestealer

    • Drops file in Drivers directory

    • Sets service image path in registry

      persistence

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks