8ed90458d2d38abe6510377a28ccae07ab44bb0d72bdf7dfb7f7400775f2ae17 | Triage

Sharing

General

Target

VoicemodSetup_2.46.0.0.exe
Size

113.0MB
Sample

231031-2cljwagg47
MD5

6a1079c0feb201875ab6d12db2c38c35
SHA1

38e546d7acce9b6e8e74abd45b139f79fd13cd4f
SHA256

8ed90458d2d38abe6510377a28ccae07ab44bb0d72bdf7dfb7f7400775f2ae17
SHA512

128d6203c4733473006b1afde324a2346ad7f2fa5151e9f03e14155e9e916ad6cc240abee4c00a186f26a643b69a75e06d25dac7e3d93a850b9a01f6d28d8457
SSDEEP

1572864:mSXyMuz2+zu5uxFbEOSe4TeXiZinscllPAc3Nxmc5X+a1Uyo5GyhloNy1UPhzTno:mSXyMuHQYHSWSmoc3/mc5lUiNy1UZzk

Score

8^/10

discovery evasion persistence

Malware Config

Targets

- Target
  
  VoicemodSetup_2.46.0.0.exe
- Size
  
  113.0MB
- MD5
  
  6a1079c0feb201875ab6d12db2c38c35
- SHA1
  
  38e546d7acce9b6e8e74abd45b139f79fd13cd4f
- SHA256
  
  8ed90458d2d38abe6510377a28ccae07ab44bb0d72bdf7dfb7f7400775f2ae17
- SHA512
  
  128d6203c4733473006b1afde324a2346ad7f2fa5151e9f03e14155e9e916ad6cc240abee4c00a186f26a643b69a75e06d25dac7e3d93a850b9a01f6d28d8457
- SSDEEP
  
  1572864:mSXyMuz2+zu5uxFbEOSe4TeXiZinscllPAc3Nxmc5X+a1Uyo5GyhloNy1UPhzTno:mSXyMuHQYHSWSmoc3/mc5lUiNy1UZzk
Score

8^/10

discovery evasion persistence
- Drops file in Drivers directory
- Modifies Windows Firewall
  evasion
- Adds Run key to start application
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Drops file in System32 directory
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Peripheral Device Discovery

Process Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryevasionpersistence