Resubmissions

08/10/2023, 19:00

231008-xnylcshg25 7

08/10/2023, 18:31

231008-w56smahe67 7

08/10/2023, 18:23

231008-w1p93sfb21 7

General

  • Target

    Winrar.msi

  • Size

    22.5MB

  • Sample

    231008-xnylcshg25

  • MD5

    0f1c7132d7b51b6104c9aca5df8c957a

  • SHA1

    d025e056fe3c2481ccaff6481ec8691f07ebb96c

  • SHA256

    dd25df2fb647dd36747d9cbbd53814f2ec140aef533a6cf094c65d4f8d3728c8

  • SHA512

    9aa843ab598c9626f749ead06a10dea7f178ed8efc27e86055e41cb02de31eec05589ccc8f24bf271e8cc568811259f5b5c35a03a8f0d8fa0ea25e028d8e5207

  • SSDEEP

    393216:fImSoA1xt134jyZERsTS/3RUufzmx1EO0OO1HMDng+7Nj2uney9LBK5GybA9H:fINXj5Y3Rho50OO1s7pMgtDKK9H

Malware Config

Targets

    • Target

      Winrar.msi

    • Size

      22.5MB

    • MD5

      0f1c7132d7b51b6104c9aca5df8c957a

    • SHA1

      d025e056fe3c2481ccaff6481ec8691f07ebb96c

    • SHA256

      dd25df2fb647dd36747d9cbbd53814f2ec140aef533a6cf094c65d4f8d3728c8

    • SHA512

      9aa843ab598c9626f749ead06a10dea7f178ed8efc27e86055e41cb02de31eec05589ccc8f24bf271e8cc568811259f5b5c35a03a8f0d8fa0ea25e028d8e5207

    • SSDEEP

      393216:fImSoA1xt134jyZERsTS/3RUufzmx1EO0OO1HMDng+7Nj2uney9LBK5GybA9H:fINXj5Y3Rho50OO1s7pMgtDKK9H

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Registers COM server for autorun

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks