Overview

overview

6

Static

static

1

VisualStudioSetup.exe

windows10-2004-x64

6

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VisualStudioSetup.exe

  • Size

    3.8MB

  • Sample

    240417-s3jnjaff8y

  • MD5

    bf245ec47ebc17cfb16cdb61b318f0cc

  • SHA1

    5231d2f523a3369eb47a435e9d4a1ac5a34d5041

  • SHA256

    1c6044a742dad5060a6cc927c29deb9f4497fda846496af2706ed27e203677f7

  • SHA512

    f8d8ca0d474252c2bb25b566f8ef1a563ece58d12a40470651543e233dc759b442f57f8eb457fafe771ffee45a93374b4bf32995e1c88bc4b9d6b07d31df46c5

  • SSDEEP

    49152:Q6bEbiMC/R51Rf9fPrFHB9k1JKbFQRVevDjr4Oapdzq88oPOV2gHy4:NEbixR9fPrFHwu4VeLjUOkq8XOUgH7

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      VisualStudioSetup.exe

    • Size

      3.8MB

    • MD5

      bf245ec47ebc17cfb16cdb61b318f0cc

    • SHA1

      5231d2f523a3369eb47a435e9d4a1ac5a34d5041

    • SHA256

      1c6044a742dad5060a6cc927c29deb9f4497fda846496af2706ed27e203677f7

    • SHA512

      f8d8ca0d474252c2bb25b566f8ef1a563ece58d12a40470651543e233dc759b442f57f8eb457fafe771ffee45a93374b4bf32995e1c88bc4b9d6b07d31df46c5

    • SSDEEP

      49152:Q6bEbiMC/R51Rf9fPrFHB9k1JKbFQRVevDjr4Oapdzq88oPOV2gHy4:NEbixR9fPrFHwu4VeLjUOkq8XOUgH7

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks