Resubmissions

20-04-2024 04:23

240420-ez6r1agd26 8

20-04-2024 04:23

240420-ezwl2ahb6z 1

General

  • Target

    inifnite_craft_save_merger-main (2).zip

  • Size

    8KB

  • Sample

    240420-ez6r1agd26

  • MD5

    b6989fb65c24b811f48ce93c44257862

  • SHA1

    dbb3c22f1ac31786051a411e4eef62d48f60c034

  • SHA256

    d556c62e16e06235ad49d2ef67170b39458bfa8116cf7a7817ea4bcdb0a6a7a5

  • SHA512

    17007d2673fa1bb7fa843597213428a9f539e1602554e4be238459a3721b09ea6d6bd31a7c5cd73856a10451b5b915190fcbc4085588de66122b0eff9d9e950e

  • SSDEEP

    96:Boi/mopQmdAl+wpa88Jws9pu/By0591D1tF5oYXvjNQhnqg6/dCHFb4mhNg64O0h:Bf/xpRiaJ6/b91HQEjN4qGb4ECxoreXD

Malware Config

Targets

    • Target

      inifnite_craft_save_merger-main (2).zip

    • Size

      8KB

    • MD5

      b6989fb65c24b811f48ce93c44257862

    • SHA1

      dbb3c22f1ac31786051a411e4eef62d48f60c034

    • SHA256

      d556c62e16e06235ad49d2ef67170b39458bfa8116cf7a7817ea4bcdb0a6a7a5

    • SHA512

      17007d2673fa1bb7fa843597213428a9f539e1602554e4be238459a3721b09ea6d6bd31a7c5cd73856a10451b5b915190fcbc4085588de66122b0eff9d9e950e

    • SSDEEP

      96:Boi/mopQmdAl+wpa88Jws9pu/By0591D1tF5oYXvjNQhnqg6/dCHFb4mhNg64O0h:Bf/xpRiaJ6/b91HQEjN4qGb4ECxoreXD

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks