Resubmissions

25-03-2024 18:47

240325-xfajkaae3y 1

25-03-2024 18:46

240325-xezgasae2z 1

25-03-2024 18:42

240325-xcrcxaff37 7

25-03-2024 18:40

240325-xbk5haad21 1

General

  • Target

    Windows11InstallationAssistant (1).exe

  • Size

    4.0MB

  • Sample

    240325-xcrcxaff37

  • MD5

    9efe0c8b7f96c1a7d5bdd52bf07d009d

  • SHA1

    dc6ff2f1c0af472cdc81b05f876c10420a6bbb78

  • SHA256

    03a9b3163071ecb41e20b95eb664c3165b9fcaba89f5e5433484d65e8cfa0380

  • SHA512

    b66772e1faeff8c607b6624106530945997fe2105569cbf92cf0eaa31f7bd02ed46b74bae6e9d79b6f51da76445564ed73fe9eb2a6507e3ce5d543781ba227fb

  • SSDEEP

    98304:Fguv/rctyMh4cCE3p8fuCNCzLX/sA2uQqvAVGht5f/LyXtcH//9:SVtyMh9CVPUDk+4QjyXa

Score
7/10

Malware Config

Targets

    • Target

      Windows11InstallationAssistant (1).exe

    • Size

      4.0MB

    • MD5

      9efe0c8b7f96c1a7d5bdd52bf07d009d

    • SHA1

      dc6ff2f1c0af472cdc81b05f876c10420a6bbb78

    • SHA256

      03a9b3163071ecb41e20b95eb664c3165b9fcaba89f5e5433484d65e8cfa0380

    • SHA512

      b66772e1faeff8c607b6624106530945997fe2105569cbf92cf0eaa31f7bd02ed46b74bae6e9d79b6f51da76445564ed73fe9eb2a6507e3ce5d543781ba227fb

    • SSDEEP

      98304:Fguv/rctyMh4cCE3p8fuCNCzLX/sA2uQqvAVGht5f/LyXtcH//9:SVtyMh9CVPUDk+4QjyXa

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks