General

  • Target

    windowsdesktop-runtime-8.0.4-win-x64.exe

  • Size

    55.7MB

  • Sample

    240429-1pzrlach3v

  • MD5

    4ed51a4f5c761cf37a8841ebb40c5191

  • SHA1

    8a63e9c68c2b68790edeb8e49de716542a277c6f

  • SHA256

    9e67dad8898790b8ad800283fb9323591c6e2409bd3b6536e29b18069ff818c1

  • SHA512

    8a0b1ab3a774c33f46cd042783cf785c33f2d9e0bdeee4ff8bf96cfa90a2101a5711231840ef93eab101409e7f3f3770d86e1a55bd52709af08d1a6c908cc194

  • SSDEEP

    786432:A/I02ITMDN6RXQEfI+urj93T/+NFrwIQyZjcJIl63BghAV0e9QWCegJG3:kIjIQ53E3Uj9DQ31Zjw3BghAV0Ap8A

Malware Config

Targets

    • Target

      windowsdesktop-runtime-8.0.4-win-x64.exe

    • Size

      55.7MB

    • MD5

      4ed51a4f5c761cf37a8841ebb40c5191

    • SHA1

      8a63e9c68c2b68790edeb8e49de716542a277c6f

    • SHA256

      9e67dad8898790b8ad800283fb9323591c6e2409bd3b6536e29b18069ff818c1

    • SHA512

      8a0b1ab3a774c33f46cd042783cf785c33f2d9e0bdeee4ff8bf96cfa90a2101a5711231840ef93eab101409e7f3f3770d86e1a55bd52709af08d1a6c908cc194

    • SSDEEP

      786432:A/I02ITMDN6RXQEfI+urj93T/+NFrwIQyZjcJIl63BghAV0e9QWCegJG3:kIjIQ53E3Uj9DQ31Zjw3BghAV0Ap8A

    • Adds Run key to start application

    • Blocklisted process makes network request

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v15

Tasks