Overview

overview

8

Static

static

3

Scansys_Se...31.exe

windows7-x64

7

Scansys_Se...31.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    Scansys_Setup_x64_V1.0.47.40_20230731.exe

  • Size

    724.1MB

  • Sample

    240426-s97c6seh76

  • MD5

    3d7da3c78823557e9cafc45ff49c36ff

  • SHA1

    4140d5269309f1577b310ab49898e92bbbbab6fc

  • SHA256

    a41c96c81fb1143437959da3958ba834701aff642f41e890d1850a85e2540cba

  • SHA512

    d2c60952343d01ce9f78c392004cf415792e0e48ac87c8a45dd78078b12aefdaf05d3c074a22be459112e318e3b1271d5a72b18bcefc4946e86c8c13c16d776e

  • SSDEEP

    12582912:NiaDw+rkZROkeJKnaKEExbq2NjdKilzAo0xgNdLnOSrs6VYNeAOMPNM4JqufADsh:NC+riR3Hn9EExe2NMQAZxgzKS46Vuekj

Score
8/10
discoverypersistence

Malware Config

Targets

    • Target

      Scansys_Setup_x64_V1.0.47.40_20230731.exe

    • Size

      724.1MB

    • MD5

      3d7da3c78823557e9cafc45ff49c36ff

    • SHA1

      4140d5269309f1577b310ab49898e92bbbbab6fc

    • SHA256

      a41c96c81fb1143437959da3958ba834701aff642f41e890d1850a85e2540cba

    • SHA512

      d2c60952343d01ce9f78c392004cf415792e0e48ac87c8a45dd78078b12aefdaf05d3c074a22be459112e318e3b1271d5a72b18bcefc4946e86c8c13c16d776e

    • SSDEEP

      12582912:NiaDw+rkZROkeJKnaKEExbq2NjdKilzAo0xgNdLnOSrs6VYNeAOMPNM4JqufADsh:NC+riR3Hn9EExe2NMQAZxgzKS46Vuekj

    Score
    8/10
    discoverypersistence

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to obtain their binary as valid.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks