3b09fbbd5f028c12ffb725282bced379d9bdd5978d20c077eb4fd6208614df7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3cc449fbb132abcbf65f0fb31100067c
Size

4.3MB
Sample

240101-nwcjescfg2
MD5

3cc449fbb132abcbf65f0fb31100067c
SHA1

5cc762d271c1a694bcc4c1717fe05841a4e65b47
SHA256

3b09fbbd5f028c12ffb725282bced379d9bdd5978d20c077eb4fd6208614df7b
SHA512

a365eb0a878909cc0bd780e4f114512738691900ea0b2cff0fd0d8ce2a982fb61ef8b81bb3b3eecb3c76c5b77d1e3721f10255b5f87465cea77077a5d6abc37b
SSDEEP

98304:Q1IRPmjOry+M+NR1VKF5PPlVXp3NI0bLwmnV994hcfn2wqSdnnw:QOPQ4KIMF5Prpm0HwmnVX42/2iw

Score

7^/10

discovery

Malware Config

Targets

- Target
  
  WaterSetup.exe
- Size
  
  4.8MB
- MD5
  
  c4c8fdc759ee53fd5ab0c514867e2ff2
- SHA1
  
  cd1aa10a35f4bdad939839ef0cd8493dd920248a
- SHA256
  
  72da8abb0549c9ded31e7f9c6ff365881cafa8a33eee2c3f20e108d5b693a6ee
- SHA512
  
  23e4a8d790f14cd3fe02b7253104fd3e3c407a3a515f3aad14e7b4eedb29e0294e8163d2d77eb3a6a97b27a28ff0bdb751b81ee361f778dd0df36f95535dd7ad
- SSDEEP
  
  98304:LXT0x3O82MLCEotkPfLXBQlO0dfcn8sg+6P1Lq5j/bGb:LXTgB28Kk7XBQR9cfgxP1e5j/y
Score

7^/10

discovery
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2