General

  • Target

    Setup.exe

  • Size

    1.4MB

  • Sample

    231029-r299esgb7s

  • MD5

    cdb89982fa92b9b7962c99cab62ea4d6

  • SHA1

    32764942b6ad4ec9aac486fb0fa1eedcab97322e

  • SHA256

    bc751e2748979724f82c7739d9b56ae074c02be11b710e64fefbb9aac4d2a185

  • SHA512

    1ec613aed9b213c27b545ff0d3b2852b9770d9d2dc560f43aff5c3fd507970672526b863d59f392f1ca9a78dc66e7946837dd17c238ce284c12e90159f5bd88d

  • SSDEEP

    24576:2ZNUkTGwk2iIT+WgfjUk5Mesj7AxbpqnubLfqJhh7aZgpz7GkeNMxE6z:2ZNrk2iITxAds/8xfc/0k+kxE

Score
7/10

Malware Config

Targets

    • Target

      Setup.exe

    • Size

      1.4MB

    • MD5

      cdb89982fa92b9b7962c99cab62ea4d6

    • SHA1

      32764942b6ad4ec9aac486fb0fa1eedcab97322e

    • SHA256

      bc751e2748979724f82c7739d9b56ae074c02be11b710e64fefbb9aac4d2a185

    • SHA512

      1ec613aed9b213c27b545ff0d3b2852b9770d9d2dc560f43aff5c3fd507970672526b863d59f392f1ca9a78dc66e7946837dd17c238ce284c12e90159f5bd88d

    • SSDEEP

      24576:2ZNUkTGwk2iIT+WgfjUk5Mesj7AxbpqnubLfqJhh7aZgpz7GkeNMxE6z:2ZNrk2iITxAds/8xfc/0k+kxE

    Score
    7/10
    • Uses the VBS compiler for execution

    • Accesses cryptocurrency files/wallets, possible credential harvesting

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v15

Tasks