333304edf4c371f627a365cbc348b1c644adf36e38ea3b9c6e9db0834a9d8976

Resubmissions

26/05/2024, 08:38

240526-kjz76scf4t 10

05/11/2023, 09:42

231105-lpvejsdh9v 10

Sharing

Copy URL Twitter E-mail

General

Target

Nuclear War Simulator Free Download.exe
Size

5.0MB
Sample

240526-kjz76scf4t
MD5

9aa39a7c40a0807c0015df61d463ca1d
SHA1

5410aceabce2679c0e09af94d94f64e4b197b794
SHA256

333304edf4c371f627a365cbc348b1c644adf36e38ea3b9c6e9db0834a9d8976
SHA512

7d5cc2dd4c6420be76f9d373a8876ab07e547295cb75ce3457de4e7b113c28ca7d9e47c166075200de5e5053f0da9fcacc1b41ed8b12e34f87540ad28a83f6e5
SSDEEP

98304:ZkLQdqUwaDLzmR3Wve8Sncf6I9pR/3oL0derh++gsx:64PxDfmR3W3+cf7NM0KYMx

Score

10^/10

Malware Config

Targets

- Target
  
  Nuclear War Simulator Free Download.exe
- Size
  
  5.0MB
- MD5
  
  9aa39a7c40a0807c0015df61d463ca1d
- SHA1
  
  5410aceabce2679c0e09af94d94f64e4b197b794
- SHA256
  
  333304edf4c371f627a365cbc348b1c644adf36e38ea3b9c6e9db0834a9d8976
- SHA512
  
  7d5cc2dd4c6420be76f9d373a8876ab07e547295cb75ce3457de4e7b113c28ca7d9e47c166075200de5e5053f0da9fcacc1b41ed8b12e34f87540ad28a83f6e5
- SSDEEP
  
  98304:ZkLQdqUwaDLzmR3Wve8Sncf6I9pR/3oL0derh++gsx:64PxDfmR3W3+cf7NM0KYMx
Score

9^/10

discovery execution persistence
- Detects phishing scam keywords
- Creates new service(s)
  persistence execution
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

System Services

T1569

Service Execution

T1569.002

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Detects phishing scam keywords

Creates new service(s)

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2