Overview

overview

8

Static

static

1

DLL Inject...US.msi

windows10-1703-x64

8

Resubmissions

29-05-2024 12:47

240529-p1nypaeg41 8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DLL Injector_2.1.0_x86_en-US.msi

  • Size

    2.9MB

  • Sample

    240529-p1nypaeg41

  • MD5

    0592ca25cf22e8d5daabacd1130d38f6

  • SHA1

    0a59fd8723de4cb9bf6c3272a5db7771e575eff9

  • SHA256

    3b8991f1eebfc46988db25fe0ded11c3c08df81ae2ca1baf9103ba8259cafc99

  • SHA512

    1be2c9f7ff9fc9cab5e5a784b281585d89070413722cb4584e91d4a4b57e628643871ee672049c32a8b2399c8358f1c6d7df20af1b3c39aa9b669902b71a91cc

  • SSDEEP

    49152:TXt8FXtmZR9m+/YXz573yI2FvlfC+fM//uuEUNLTVx+pv/Z1BWCMnT5ldQqnUIwE:T98FXinYXz5ryI2FvvM/mu/NLT41BWd

Score
8/10
executionpersistence

Malware Config

Targets

    • Target

      DLL Injector_2.1.0_x86_en-US.msi

    • Size

      2.9MB

    • MD5

      0592ca25cf22e8d5daabacd1130d38f6

    • SHA1

      0a59fd8723de4cb9bf6c3272a5db7771e575eff9

    • SHA256

      3b8991f1eebfc46988db25fe0ded11c3c08df81ae2ca1baf9103ba8259cafc99

    • SHA512

      1be2c9f7ff9fc9cab5e5a784b281585d89070413722cb4584e91d4a4b57e628643871ee672049c32a8b2399c8358f1c6d7df20af1b3c39aa9b669902b71a91cc

    • SSDEEP

      49152:TXt8FXtmZR9m+/YXz573yI2FvlfC+fM//uuEUNLTVx+pv/Z1BWCMnT5ldQqnUIwE:T98FXinYXz5ryI2FvvM/mu/NLT41BWd

    Score
    8/10
    executionpersistence

    • Blocklisted process makes network request

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Sets file execution options in registry

      persistence
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks