Overview

overview

8

Static

static

3

CustomRP.1.17.23.exe

windows7-x64

8

CustomRP.1.17.23.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    CustomRP.1.17.23.exe

  • Size

    6.3MB

  • Sample

    240523-ww6fhabe82

  • MD5

    a99a9fb817b4606921d44605af40ebb2

  • SHA1

    e303d443a2af8b42f7a1a45f63154162cbcdea88

  • SHA256

    843363a99401c36c59f68a53ce553f20b5d9784594c84f29ef392d377c59d601

  • SHA512

    052e25991387ff04cdbb55baf98d127cce543c4a68e63aea218619f36a461b937905dc9c9e2ce8c2dad6c51d84d6b5df59b9fe6e491aac50228a77670013075d

  • SSDEEP

    196608:OJz9afXiU2qS5D6AM6T7BuvHO9MQMJxO5KtTHCx7hX:5yUfS5D6AMIMvHdQMJxOotQ

Score
8/10
discovery

Malware Config

Targets

    • Target

      CustomRP.1.17.23.exe

    • Size

      6.3MB

    • MD5

      a99a9fb817b4606921d44605af40ebb2

    • SHA1

      e303d443a2af8b42f7a1a45f63154162cbcdea88

    • SHA256

      843363a99401c36c59f68a53ce553f20b5d9784594c84f29ef392d377c59d601

    • SHA512

      052e25991387ff04cdbb55baf98d127cce543c4a68e63aea218619f36a461b937905dc9c9e2ce8c2dad6c51d84d6b5df59b9fe6e491aac50228a77670013075d

    • SSDEEP

      196608:OJz9afXiU2qS5D6AM6T7BuvHO9MQMJxO5KtTHCx7hX:5yUfS5D6AMIMvHdQMJxOotQ

    Score
    8/10
    discovery

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks