81ad34b77b38d4d51c14dd1ff2bf22e56d7f0325be2cfbed9b02904a28b2909f

Sharing

Copy URL Twitter E-mail

General

Target
Enscape-4.1.0.1388-preview3.rar
Size 418.5MB
Sample240625-tpem4asgnn
SHA256 81ad34b77b38d4d51c14dd1ff2bf22e56d7f0325be2cfbed9b02904a28b2909f
MD5 4f698b3ca758eb4265461c74b781d7fa
SHA1 53b0930fcc556746d78b4499abe678e5e13dd294
SHA512 986e8268a41b97785987e1b2bd3eb059b48991bb620de59b652471e96e6c69c1b11f3dcfbeb450122324c3ea4c5bbdbed3006c7fac3b8656899ca91a268934a7
SSDEEP 12582912:hBeHJex2G1TzCD5xlzhYxbnFcOO0VDR0HUJzA:hwHJb6cx1IFxVDR9A
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  Enscape-4.1.0.1388-preview3.rar
- Size 418.5MB
- SHA256 81ad34b77b38d4d51c14dd1ff2bf22e56d7f0325be2cfbed9b02904a28b2909f
- MD5 4f698b3ca758eb4265461c74b781d7fa
- SHA1 53b0930fcc556746d78b4499abe678e5e13dd294
- SHA512 986e8268a41b97785987e1b2bd3eb059b48991bb620de59b652471e96e6c69c1b11f3dcfbeb450122324c3ea4c5bbdbed3006c7fac3b8656899ca91a268934a7
- SSDEEP 12582912:hBeHJex2G1TzCD5xlzhYxbnFcOO0VDR0HUJzA:hwHJb6cx1IFxVDR9A
- MD5 SHA1 SHA512 SSDEEP
Score

3^/10
behavioral1 behavioral2
- Target
  Enscape-4.1.0.1388-preview3/Enscape-4.1.0.1388-preview3.exe
- Size 430.0MB
- SHA256 804848fa10a4d73273f555a3d13fa11e535249f06e319e447b41d26f4c48b87a
- MD5 f395703210fe2ab787f0fa2cb7ca8efc
- SHA1 3b6ab656c5b3ad128199ba90380eef7ec3763d4f
- SHA512 cfa8a60d3228be8ae12ef052578ccfe281c7f0591e0e74f4e1f136fbffa00fe70edcbe61b97609bca3477b39bfaaa224e09879f8d73cae125b1c4aa03ed9c03f
- SSDEEP 12582912:6naqhx+YqI6cUrC6xOYK+tQ8zTVQYxNOZ7kW+Uo0a:6naatjUrC6xOYK+tQKuiV
- MD5 SHA1 SHA512 SSDEEP
Score

7^/10

discovery persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Blocklisted process makes network request
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
behavioral3 behavioral4
- Target
  Enscape-4.1.0.1388-preview3/crack/Enscape.License.Adapter.dll
- Size 140KB
- SHA256 dc4350029b22ddeba6afa78532d3469d7f927d33c1b8342615fde5ecbf971219
- MD5 289e12ae6a4ece309a5fd373bbcc88c0
- SHA1 8b6b29dd41b66f45bfe72cba4d97b1482213ca19
- SHA512 d81a0f47dfdee7eab10d8b75df929b3362330340de581fe5c732666a009fc063ab9952760f099fa44e003d9406139bce13bea8f09c7f9e3e91b33d698f78e4de
- SSDEEP 3072:of2ri4FKmx/ajCVOBt7GZzm4K6YarRUJrcazR:eAD0j0OBt7GZzm4trR0zR
- MD5 SHA1 SHA512 SSDEEP
Score

1^/10
behavioral5 behavioral6
- Target
  Enscape-4.1.0.1388-preview3/crack/README.txt
- Size 137B
- SHA256 c6272f561537448e361cec8669ed00956410969905f8c6c1c80d173cf61e6ff8
- MD5 419930e6181855200000901ad1ef9126
- SHA1 4c4d38ec04b915652e6ee1200531aab100c85c3b
- SHA512 b9924dcc59b1b9b80f8ff20cdebfcc77b891dc1f7dd3ac5c6a5fd930e46f3f84ae543553779c787c88bb52faeacc78d18f8cfc3fd9737071e80b99ff7706a738
- MD5 SHA1 SHA512
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Adds Run key to start application

Blocklisted process makes network request

Checks installed software on the system

Enumerates connected drives

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8