General

  • Target

    CNCOnline_2.0.7.msi

  • Size

    2.5MB

  • Sample

    240309-wng3yaeg71

  • MD5

    6f81e943072b19b0e2c1d4960d2b720a

  • SHA1

    257922d988fe50c3d8d5deab059a0dd71580d431

  • SHA256

    b9912c97500f7e4ded5a7e343fb97d71620d0e8c69837c3d1063ef90d79dde67

  • SHA512

    d48967cba540eb9f98b15043cdf89e1f888c350f7d4c4efe33680feffe304408b4cef93df7478828ac88a40fa52f6c6e71559a991717067d57b08ed4374fc340

  • SSDEEP

    49152:ZpXKxLwNgcdXZ+4hVyI4EQRHN+yxkyWxLJK4LIi:LaxsFdXJjypE4x8l5

Score
6/10

Malware Config

Targets

    • Target

      CNCOnline_2.0.7.msi

    • Size

      2.5MB

    • MD5

      6f81e943072b19b0e2c1d4960d2b720a

    • SHA1

      257922d988fe50c3d8d5deab059a0dd71580d431

    • SHA256

      b9912c97500f7e4ded5a7e343fb97d71620d0e8c69837c3d1063ef90d79dde67

    • SHA512

      d48967cba540eb9f98b15043cdf89e1f888c350f7d4c4efe33680feffe304408b4cef93df7478828ac88a40fa52f6c6e71559a991717067d57b08ed4374fc340

    • SSDEEP

      49152:ZpXKxLwNgcdXZ+4hVyI4EQRHN+yxkyWxLJK4LIi:LaxsFdXJjypE4x8l5

    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets file execution options in registry

MITRE ATT&CK Enterprise v15

Tasks