Overview

overview

6

Static

static

1

VisualStudioSetup.exe

windows10-1703-x64

6

VisualStudioSetup.exe

windows10-2004-x64

5

VisualStudioSetup.exe

windows11-21h2-x64

4

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VisualStudioSetup.exe

  • Size

    3.8MB

  • Sample

    240427-rspalacc24

  • MD5

    ee8662fc39220a328d4d33b8bcc95122

  • SHA1

    861ed8a3c3df0c167e211e2ce59441d79d91e51b

  • SHA256

    fa9d7937be2a58815fa10ce365e48014e4839996b99134c33a178dc9ef5035ae

  • SHA512

    b0f0d42c423a5673d0442a5a10384e6d9a8371733d0b5818bbda6fc612e02c2b378be0b29987375fd68fb91ae256731d2ab5715f7464a1a2b115b745a54df398

  • SSDEEP

    49152:P6bEbiMC/R51Rf9fPrFHB9k1JKbFQRVevDjr4Oapdzq88oPOV2gHyI:KEbixR9fPrFHwu4VeLjUOkq8XOUgHr

Score
6/10
discoverypersistence

Malware Config

Targets

    • Target

      VisualStudioSetup.exe

    • Size

      3.8MB

    • MD5

      ee8662fc39220a328d4d33b8bcc95122

    • SHA1

      861ed8a3c3df0c167e211e2ce59441d79d91e51b

    • SHA256

      fa9d7937be2a58815fa10ce365e48014e4839996b99134c33a178dc9ef5035ae

    • SHA512

      b0f0d42c423a5673d0442a5a10384e6d9a8371733d0b5818bbda6fc612e02c2b378be0b29987375fd68fb91ae256731d2ab5715f7464a1a2b115b745a54df398

    • SSDEEP

      49152:P6bEbiMC/R51Rf9fPrFHB9k1JKbFQRVevDjr4Oapdzq88oPOV2gHyI:KEbixR9fPrFHwu4VeLjUOkq8XOUgHr

    Score
    6/10
    discoverypersistence

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks