General

  • Target

    Diavlo_Setup_3.2.4.exe

  • Size

    75.1MB

  • Sample

    230904-clh3nsdg55

  • MD5

    3d611ade68c73b73527e06ac4d7e8346

  • SHA1

    8ea1cc101c74208e8d436f97d451860bbf5a9566

  • SHA256

    ce2dc31d05f459443b7526c3839ef1df7a8c2899338f3e878fd2a1eda2f53604

  • SHA512

    478d4960268bd142833172056027cc3900f7429ea21edd540bb91af3385f6f5adac0a3ff3741047b2f1ffaa4d393e812b8087db175761d99aba69903cdb83093

  • SSDEEP

    1572864:2e8JFVMaN1UZ81ZvR7AXnyyCtL50tw5DIL3qD6VmuUg1YqcuMs3DMKszSgW0K679:2pXn1UW71Mn5CtLp5D63G6VP1ULs4f8G

Score
7/10

Malware Config

Targets

    • Target

      Diavlo_Setup_3.2.4.exe

    • Size

      75.1MB

    • MD5

      3d611ade68c73b73527e06ac4d7e8346

    • SHA1

      8ea1cc101c74208e8d436f97d451860bbf5a9566

    • SHA256

      ce2dc31d05f459443b7526c3839ef1df7a8c2899338f3e878fd2a1eda2f53604

    • SHA512

      478d4960268bd142833172056027cc3900f7429ea21edd540bb91af3385f6f5adac0a3ff3741047b2f1ffaa4d393e812b8087db175761d99aba69903cdb83093

    • SSDEEP

      1572864:2e8JFVMaN1UZ81ZvR7AXnyyCtL50tw5DIL3qD6VmuUg1YqcuMs3DMKszSgW0K679:2pXn1UW71Mn5CtLp5D63G6VP1ULs4f8G

    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks