Overview

overview

5

Static

static

3

Setup-v-b5xa3Su.exe

windows7-x64

5

Setup-v-b5xa3Su.exe

windows10-2004-x64

5

Uninstall VLC.exe

windows7-x64

4

Uninstall VLC.exe

windows10-2004-x64

5

Resubmissions

02-05-2024 13:12

240502-qfqr8abg26 5

02-05-2024 13:06

240502-qb8ggahe7t 5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Setup-v-b5xa3Su.exe

  • Size

    704KB

  • Sample

    240502-qfqr8abg26

  • MD5

    d1fc9e6d71a4867ab71af5566e525ba0

  • SHA1

    593b10280a926134839feb8e2f9d0da9ee9c0593

  • SHA256

    21be0a068d7d1b57578bfb2ed850b3f3b1cfe4a4c47981ead95abdb8c20278fe

  • SHA512

    c82a23e5e0e3a38e32fc08401890852a71ec90640bbfb944ed7d45812493a53d2be2c0e4373692e52c77d666b8ae72cd0d15c3dc4bc3cc52887ad4589820658d

  • SSDEEP

    12288:iOIVD3gyucpjRKaDPNKT1zH3ptaR1sDfOQSvJqFZ6rOIIzVFA4+M:iOIyyuUjMaDu173pG1szLSvJwSOZBv

Score
5/10
discoveryexecution

Malware Config

Targets

    • Target

      Setup-v-b5xa3Su.exe

    • Size

      704KB

    • MD5

      d1fc9e6d71a4867ab71af5566e525ba0

    • SHA1

      593b10280a926134839feb8e2f9d0da9ee9c0593

    • SHA256

      21be0a068d7d1b57578bfb2ed850b3f3b1cfe4a4c47981ead95abdb8c20278fe

    • SHA512

      c82a23e5e0e3a38e32fc08401890852a71ec90640bbfb944ed7d45812493a53d2be2c0e4373692e52c77d666b8ae72cd0d15c3dc4bc3cc52887ad4589820658d

    • SSDEEP

      12288:iOIVD3gyucpjRKaDPNKT1zH3ptaR1sDfOQSvJqFZ6rOIIzVFA4+M:iOIyyuUjMaDu173pG1szLSvJwSOZBv

    Score
    5/10
    discoveryexecution

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      Uninstall VLC.exe

    • Size

      176KB

    • MD5

      be867803d50044eacf0b4431d4f8ba73

    • SHA1

      8c24006b5268fc44edd52f81dec7e225c0ace63b

    • SHA256

      8ac4bd12f48777baf67a6724ba6ffe0ce0c710f59c43d691e69b0c703c0482f6

    • SHA512

      6e581023614ad87cce45939638c8a185f67196b35af291f5b97cd66a08c1dc6cf6a1b52d818e75aa606412b4340d90f2a9df880c8fcf139e3367b9a78c9546b0

    • SSDEEP

      3072:/n77v00hEoDEtauISLVkEC90RmquayIAaipD4aH2tvhOEA1RJCir86SrSrvrRbOd:/740IYIVkE3RmCvA7D4s2t0EyL+2iaUp

    Score
    5/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    behavioral3behavioral4

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Scheduled Task/Job

1
T1053

Persistence

Scheduled Task/Job

1
T1053

Privilege Escalation

Scheduled Task/Job

1
T1053

Defense Evasion

Credential Access

Discovery

Query Registry

5
T1012

System Information Discovery

6
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks