General
-
Target
btweb_installer.exe
-
Size
1.7MB
-
Sample
240212-ytlpesbd7x
-
MD5
cb396c456ebc8ae2951104e427873239
-
SHA1
9310d19b53e78d52311aa40ec04c022b2dd42121
-
SHA256
a0b19474cb32652c311ade86bbc47455c814b7f212c5a4a011e870b491452491
-
SHA512
d29e1e70914ef464014f24ecefa2d21918d49ef53284aa1eeae3ea77f73ce7de26907b2f1107017c8990e3428ad7843caa09b99d5598bd0385f3adde4ae28698
-
SSDEEP
24576:D7FUDowAyrTVE3U5FXhOBxI3EdKI1ZauIt7zH+g2TZK7NnKyWemCVo:DBuZrEUB0dKI1jIt3+PTZchKyKCV
Static task
static1
Behavioral task
behavioral1
Sample
btweb_installer.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
btweb_installer.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
btweb_installer.exe
-
Size
1.7MB
-
MD5
cb396c456ebc8ae2951104e427873239
-
SHA1
9310d19b53e78d52311aa40ec04c022b2dd42121
-
SHA256
a0b19474cb32652c311ade86bbc47455c814b7f212c5a4a011e870b491452491
-
SHA512
d29e1e70914ef464014f24ecefa2d21918d49ef53284aa1eeae3ea77f73ce7de26907b2f1107017c8990e3428ad7843caa09b99d5598bd0385f3adde4ae28698
-
SSDEEP
24576:D7FUDowAyrTVE3U5FXhOBxI3EdKI1ZauIt7zH+g2TZK7NnKyWemCVo:DBuZrEUB0dKI1jIt3+PTZchKyKCV
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Creates new service(s)
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1