General
-
Target
Winrar.msi
-
Size
22.5MB
-
Sample
231008-xnylcshg25
-
MD5
0f1c7132d7b51b6104c9aca5df8c957a
-
SHA1
d025e056fe3c2481ccaff6481ec8691f07ebb96c
-
SHA256
dd25df2fb647dd36747d9cbbd53814f2ec140aef533a6cf094c65d4f8d3728c8
-
SHA512
9aa843ab598c9626f749ead06a10dea7f178ed8efc27e86055e41cb02de31eec05589ccc8f24bf271e8cc568811259f5b5c35a03a8f0d8fa0ea25e028d8e5207
-
SSDEEP
393216:fImSoA1xt134jyZERsTS/3RUufzmx1EO0OO1HMDng+7Nj2uney9LBK5GybA9H:fINXj5Y3Rho50OO1s7pMgtDKK9H
Static task
static1
Behavioral task
behavioral1
Sample
Winrar.msi
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Winrar.msi
Resource
win10-20230915-en
Behavioral task
behavioral3
Sample
Winrar.msi
Resource
win10v2004-20230915-en
Malware Config
Targets
-
-
Target
Winrar.msi
-
Size
22.5MB
-
MD5
0f1c7132d7b51b6104c9aca5df8c957a
-
SHA1
d025e056fe3c2481ccaff6481ec8691f07ebb96c
-
SHA256
dd25df2fb647dd36747d9cbbd53814f2ec140aef533a6cf094c65d4f8d3728c8
-
SHA512
9aa843ab598c9626f749ead06a10dea7f178ed8efc27e86055e41cb02de31eec05589ccc8f24bf271e8cc568811259f5b5c35a03a8f0d8fa0ea25e028d8e5207
-
SSDEEP
393216:fImSoA1xt134jyZERsTS/3RUufzmx1EO0OO1HMDng+7Nj2uney9LBK5GybA9H:fINXj5Y3Rho50OO1s7pMgtDKK9H
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Event Triggered Execution
1Change Default File Association
1Defense Evasion
Modify Registry
4Subvert Trust Controls
1Install Root Certificate
1