General

  • Target

    inkscape-1.3.1_2023-11-16_91b66b0783-x64_yOr62Fw.msi

  • Size

    138.3MB

  • Sample

    231120-xfy7xshg79

  • MD5

    8063827e946f0877100eb79ec6a6988c

  • SHA1

    289dbc9936649878c87c459f0271dc9de1c09875

  • SHA256

    90f8f632c57fe6ab5b050ba1ed8dc08ae79d88bb9c48ee6de3e8d17db5673f58

  • SHA512

    332a1748e4d207ea2bf33abe197a0e486f722b2d2ad35d80380327cdf478f340b6b45588e96d93a6d79d2a9d19b822d373b1e128a2089112ab6e1fb9846456ed

  • SSDEEP

    3145728:xIulCxvIXQ/tveMi9CW1P2A0QEHXq4MA2PRH:xIzvIXQVv2hgAVE64m

Score
7/10

Malware Config

Targets

    • Target

      inkscape-1.3.1_2023-11-16_91b66b0783-x64_yOr62Fw.msi

    • Size

      138.3MB

    • MD5

      8063827e946f0877100eb79ec6a6988c

    • SHA1

      289dbc9936649878c87c459f0271dc9de1c09875

    • SHA256

      90f8f632c57fe6ab5b050ba1ed8dc08ae79d88bb9c48ee6de3e8d17db5673f58

    • SHA512

      332a1748e4d207ea2bf33abe197a0e486f722b2d2ad35d80380327cdf478f340b6b45588e96d93a6d79d2a9d19b822d373b1e128a2089112ab6e1fb9846456ed

    • SSDEEP

      3145728:xIulCxvIXQ/tveMi9CW1P2A0QEHXq4MA2PRH:xIzvIXQVv2hgAVE64m

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks