Overview

overview

6

Static

static

1

drw_trial_...51.exe

windows10-1703-x64

6

$TEMP/down...er.exe

windows10-1703-x64

1

$TEMP/down...ap.dll

windows10-1703-x64

3

$TEMP/down...xe.exe

windows10-1703-x64

1

$TEMP/down...up.exe

windows10-1703-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    drw_trial_installer.947914a10722851.exe

  • Size

    2.5MB

  • Sample

    240524-3xtxesfe4v

  • MD5

    c90d8cca094f99d58aaed9391d0436dc

  • SHA1

    f93c6496f521e2f9332a9da0f0f374b90f09f7de

  • SHA256

    6acce147ca1ccc0e4616d2c7fed73659ea02cd83ce11da71df99a1ad36234f57

  • SHA512

    3f9d486e06f27d33f32e0a6bf4d5f977ac41cf42e3ec3090bb747e8eec157c1ae1ff1ae84d10d73e0abed7eec79d626adce88314b5d48141439b2ce7531c941a

  • SSDEEP

    49152:0/18U67vjsddEhjFGNS9LXQOjOQKK6bxM1vehddPa46JFUxkVxq6ZBcMucAtY:3U67vYUhjjV5OdbOUhDPWTUq9cMPOY

Score
6/10

Malware Config

Targets

    • Target

      drw_trial_installer.947914a10722851.exe

    • Size

      2.5MB

    • MD5

      c90d8cca094f99d58aaed9391d0436dc

    • SHA1

      f93c6496f521e2f9332a9da0f0f374b90f09f7de

    • SHA256

      6acce147ca1ccc0e4616d2c7fed73659ea02cd83ce11da71df99a1ad36234f57

    • SHA512

      3f9d486e06f27d33f32e0a6bf4d5f977ac41cf42e3ec3090bb747e8eec157c1ae1ff1ae84d10d73e0abed7eec79d626adce88314b5d48141439b2ce7531c941a

    • SSDEEP

      49152:0/18U67vjsddEhjFGNS9LXQOjOQKK6bxM1vehddPa46JFUxkVxq6ZBcMucAtY:3U67vYUhjjV5OdbOUhDPWTUq9cMPOY

    Score
    6/10

    • Downloads MZ/PE file

    behavioral1

    • Target

      $TEMP/downloader_easeus/2.0.0/2trial/EDownloader.exe

    • Size

      1.2MB

    • MD5

      8a250a75859fe52116e706a640e6d77c

    • SHA1

      473c36d9d80173636faeeb0ae4ae9e047e4e9d8b

    • SHA256

      823ab6955052ef34218559b53d4f15224b5a850b532672fa33a7634dc74981dc

    • SHA512

      4b519b1de8f6647a5cbbda11084d096e8bbfe8f694f4fda0e0f244b477f3f15c143254b044b046302ac79b136377894027d9baa2d4ba67ed38f5a55f480a44b4

    • SSDEEP

      24576:JisJdAcuXY/WQjkLxNEl5DYjwuoJ039NzO0lQHoR8lOuLkdNoQv:PjYzhQHou8qkboQv

    Score
    1/10
    behavioral2

    • Target

      $TEMP/downloader_easeus/2.0.0/2trial/aliyun/AliyunWrap.dll

    • Size

      482KB

    • MD5

      58968e221f2522d98dbfe7574d0c44aa

    • SHA1

      424b55216f2c832202c01363e013546380f5312a

    • SHA256

      265170e701ec453b13249e7a4e4f401b87fae79442cce77060213ebcd03828c0

    • SHA512

      9bba6ffbec9b6d3de7b530b056098465a54b66494db7e7ca82e8c98802fb5a1cb500f5d505387f2a33fb9a42a533d5838b1125ef14afad11285410652c6f07b5

    • SSDEEP

      12288:YaK0OuDBlYPIj/q9DQsEfExtrlp87pMaIPuboWMlyF0Ps:W9DeuBc/IPu8WMAF0Ps

    Score
    3/10
    behavioral3

    • Target

      $TEMP/downloader_easeus/2.0.0/2trial/aliyun/AliyunWrapExe.exe

    • Size

      107KB

    • MD5

      f3b9a2d94682fee26fc079ba1e0fb040

    • SHA1

      ff9e89fbcb6939095ecfa34438d9e6ebf9ad6fb4

    • SHA256

      cdc9ee419589b8e378b030a5180b12cf4e1fc2fa132dbaf0e961adbe3c782e55

    • SHA512

      40baa3d59eb931eeab583ecbd4526031bc8d455192d69c3f87b9220ebaab194a2922e4a3e9e36db3a587f56961c0686b81bcec8382ac02f968f31b566581bbbd

    • SSDEEP

      1536:A554a+kMgHZ73LkUluTbDJgX+oLENoN2CraI9WkF1X8OEdlg5BaAUH7jfrxZM:TswTbD6LLraInhEdlg5BJUHXf8

    Score
    1/10
    behavioral4

    • Target

      $TEMP/downloader_easeus/2.0.0/2trial/aliyun/InfoForSetup.exe

    • Size

      66KB

    • MD5

      99891aaa0e15b2a514a4ff5c9ec03f4d

    • SHA1

      faf215763908a9a6b8413c7e40293fe4be9bfe7b

    • SHA256

      505ab42f0f376a4d8576bbec9cfdce43deabe168356dee760000319a73e72611

    • SHA512

      36f6d66987506a938faa7503e0fa3a6cf76aa9ca6a30ea7cb7e80d058cf203eae152ef97b2329ba83bb18fc70430a2e00e9aa1f408e94b132813b4bf741697de

    • SSDEEP

      768:CVyp8XwXEXrjOgRXvLH4IE3jDnIoiiBbIADgykhUMId50BLbCYiHDLlGAMxkEy/:CECwXShvLYIE3nnInie2khc50k7jex2/

    Score
    1/10
    behavioral5

MITRE ATT&CK Enterprise v15

Tasks