General
-
Target
MultiToolV3.rar
-
Size
13.5MB
-
Sample
240327-16bfbsga9z
-
MD5
34fbff002cde715918d9a24e3c0ed26b
-
SHA1
9a1dd20d30dd323537f9ee53d8639f5dc9e95efe
-
SHA256
756cf838cf8ee7dfbbf5340a167f40be89a9e19851f02b72a1ba3a43239dfbe1
-
SHA512
9b693a7c8799af4d7dab776eee8c4fb48d9715be473a0672ea245a35a02ff6aefd35c7b269838ea92d411dcb3ffc64a12561cd71d70c9c31aaca79863fa2fc9d
-
SSDEEP
393216:HEx37VXLCHYNF2rdcECoNRk93ETceeXpL+:k3eHY25vNwbeec
Static task
static1
Behavioral task
behavioral1
Sample
MultiToolV3.rar
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
MultiToolV3.rar
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
MultiToolV3.rar
-
Size
13.5MB
-
MD5
34fbff002cde715918d9a24e3c0ed26b
-
SHA1
9a1dd20d30dd323537f9ee53d8639f5dc9e95efe
-
SHA256
756cf838cf8ee7dfbbf5340a167f40be89a9e19851f02b72a1ba3a43239dfbe1
-
SHA512
9b693a7c8799af4d7dab776eee8c4fb48d9715be473a0672ea245a35a02ff6aefd35c7b269838ea92d411dcb3ffc64a12561cd71d70c9c31aaca79863fa2fc9d
-
SSDEEP
393216:HEx37VXLCHYNF2rdcECoNRk93ETceeXpL+:k3eHY25vNwbeec
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Registers COM server for autorun
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-