Overview

overview

8

Static

static

1

Castle of ...-1.exe

windows7-x64

8

Castle of ...-1.exe

windows10-2004-x64

6

Resubmissions

04-09-2023 00:33

230904-awfdesdb38 8

03-09-2023 23:32

230903-3jc2rada36 8

03-09-2023 22:36

230903-2jhrkace5s 8

27-07-2023 15:08

230727-sh76dsgc6t 10

27-07-2023 15:03

230727-se9vtaff33 8

27-07-2023 14:59

230727-sc3zgsfe94 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Castle of Temptation_6hiiU-1.exe

  • Size

    13.8MB

  • Sample

    230903-3jc2rada36

  • MD5

    98f37b09dadc616079b92a6c5afdd066

  • SHA1

    b55932b9c10046cfccde0210d5da29f3e5b2afb9

  • SHA256

    1f4f7b787ee329059e4de4487ba5c17c7c6ca3be95b72c9873fc9380632fa1f9

  • SHA512

    6e45a6fe9d35350be799fa95d7aa12a960695d94dd99ff581c17685b94c1e8b4ba618dc5d3932a7e0ce63c676471caeb6bc2ee40e1c644ae7848bf0db286a26f

  • SSDEEP

    196608:0j6kU9NYlObEk0Lp2dd/kZzkmxgy9NSW7I7GIXSpINbhiTGIwTh3kC3uDEN9TrSh:mLSN30LpEiSCC9XSpIFwah3RuINhkUU

Score
8/10
evasion

Malware Config

Targets

    • Target

      Castle of Temptation_6hiiU-1.exe

    • Size

      13.8MB

    • MD5

      98f37b09dadc616079b92a6c5afdd066

    • SHA1

      b55932b9c10046cfccde0210d5da29f3e5b2afb9

    • SHA256

      1f4f7b787ee329059e4de4487ba5c17c7c6ca3be95b72c9873fc9380632fa1f9

    • SHA512

      6e45a6fe9d35350be799fa95d7aa12a960695d94dd99ff581c17685b94c1e8b4ba618dc5d3932a7e0ce63c676471caeb6bc2ee40e1c644ae7848bf0db286a26f

    • SSDEEP

      196608:0j6kU9NYlObEk0Lp2dd/kZzkmxgy9NSW7I7GIXSpINbhiTGIwTh3kC3uDEN9TrSh:mLSN30LpEiSCC9XSpIFwah3RuINhkUU

    Score
    8/10
    evasion

    • Modifies Windows Firewall

      evasion

    • Checks for any installed AV software in registry

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks