General

  • Target

    TLauncher-Installer-1.3.8.exe

  • Size

    23.0MB

  • Sample

    240521-rjkwtagg8v

  • MD5

    d4ecfc9d8262e3289ee86c467c0b6ccf

  • SHA1

    5e53be039083d3e10a75e3bedcb12fe375c6e056

  • SHA256

    acb362c4192ed139f523b70d57b1cda99586971f8b4261d7e60b33307a7de0ca

  • SHA512

    20f207929ccd1c2ef56cfb5e9cba97c2a94113363a143ebb65abc1807357d9532b12002d18513f38b44fe205a3a3b4ea5644ffdfd6b1dd69983c0bb4aa4af5b3

  • SSDEEP

    393216:I25K5o5G9bK5Q5+LTc2rr6of5MJ7ZWqxPAIgtMIMlFRqWM/DX9QMIuLLf0a+jV0t:tK5o5GbKO+LtrrKJBH5lFRqlDYkLf0aL

Malware Config

Targets

    • Target

      TLauncher-Installer-1.3.8.exe

    • Size

      23.0MB

    • MD5

      d4ecfc9d8262e3289ee86c467c0b6ccf

    • SHA1

      5e53be039083d3e10a75e3bedcb12fe375c6e056

    • SHA256

      acb362c4192ed139f523b70d57b1cda99586971f8b4261d7e60b33307a7de0ca

    • SHA512

      20f207929ccd1c2ef56cfb5e9cba97c2a94113363a143ebb65abc1807357d9532b12002d18513f38b44fe205a3a3b4ea5644ffdfd6b1dd69983c0bb4aa4af5b3

    • SSDEEP

      393216:I25K5o5G9bK5Q5+LTc2rr6of5MJ7ZWqxPAIgtMIMlFRqWM/DX9QMIuLLf0a+jV0t:tK5o5GbKO+LtrrKJBH5lFRqlDYkLf0aL

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies file permissions

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Execution

Command and Scripting Interpreter

1
T1059

PowerShell

1
T1059.001

Defense Evasion

File and Directory Permissions Modification

1
T1222

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks