Resubmissions

19-04-2024 17:21

240419-vxbf3sae34 3

19-04-2024 16:42

240419-t7wpbsac9v 9

General

  • Target

    VapeV4 Cracked.exe

  • Size

    136.4MB

  • Sample

    240419-t7wpbsac9v

  • MD5

    c81c39ec1b1786bc3df81fc155e53481

  • SHA1

    beda7024931b7bcd5d231fc0ed9867ab62333bd5

  • SHA256

    a1f4e334a56de871be25f3e3d2eefe5548034901a30ebfa3cc17a067681e9350

  • SHA512

    5b4950c47c86ad1b1f31cb1c916398cde4033ce1f0795eb1c4ef05d3847d69e3821bcd1fdd876565a53e8d51af6df4ad05e604808bf9c7ac1a0d220f620f5653

  • SSDEEP

    3145728:3/zScjvcaImVEFg7kseC928LPpiDtnsS49rDVdyqqiAlx7qg7jRWYYeG8nHb:3/+cjvQzg79egjPQps1ryqFAx75oYYdC

Score
9/10

Malware Config

Targets

    • Target

      VapeV4 Cracked.exe

    • Size

      136.4MB

    • MD5

      c81c39ec1b1786bc3df81fc155e53481

    • SHA1

      beda7024931b7bcd5d231fc0ed9867ab62333bd5

    • SHA256

      a1f4e334a56de871be25f3e3d2eefe5548034901a30ebfa3cc17a067681e9350

    • SHA512

      5b4950c47c86ad1b1f31cb1c916398cde4033ce1f0795eb1c4ef05d3847d69e3821bcd1fdd876565a53e8d51af6df4ad05e604808bf9c7ac1a0d220f620f5653

    • SSDEEP

      3145728:3/zScjvcaImVEFg7kseC928LPpiDtnsS49rDVdyqqiAlx7qg7jRWYYeG8nHb:3/+cjvQzg79egjPQps1ryqFAx75oYYdC

    Score
    9/10
    • Nirsoft

    • Executes dropped EXE

    • Loads dropped DLL

    • An obfuscated cmd.exe command-line is typically used to evade detection.

MITRE ATT&CK Matrix ATT&CK v13

Execution

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Discovery

System Information Discovery

1
T1082

Process Discovery

1
T1057

Tasks