d1843a3d0326fd5e516bab8171e756ef417e6f740faf3003db8178516bc60b89 | Triage

Sharing

General

Target

Betacraftlauncher-1.09_16.exe
Size

711KB
Sample

240802-sgfdzstdqe
MD5

7604d8a9b4c4b9ca9e25216f9b4ab99f
SHA1

309e1722bfb7812e4d19d4e06db97a6ecd8cb30c
SHA256

d1843a3d0326fd5e516bab8171e756ef417e6f740faf3003db8178516bc60b89
SHA512

7e9d7fdab97ffe0f7fde949ea5d8355d0efc89b8769102e55425958491978a438c82cf944255be6f70103c7a2b0d4c115bb9b9e5f0dec95c0b4c84dcf4fbdc93
SSDEEP

12288:Eh1gvaO9uz48+RTw4uI8w90bYKaLRmRcW83YQFXrLia73lnxHAedbcZzC:Eh1gvaQuk8cU4unwQaXW0YQ9rn3lnVd1

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  Betacraftlauncher-1.09_16.exe
- Size
  
  711KB
- MD5
  
  7604d8a9b4c4b9ca9e25216f9b4ab99f
- SHA1
  
  309e1722bfb7812e4d19d4e06db97a6ecd8cb30c
- SHA256
  
  d1843a3d0326fd5e516bab8171e756ef417e6f740faf3003db8178516bc60b89
- SHA512
  
  7e9d7fdab97ffe0f7fde949ea5d8355d0efc89b8769102e55425958491978a438c82cf944255be6f70103c7a2b0d4c115bb9b9e5f0dec95c0b4c84dcf4fbdc93
- SSDEEP
  
  12288:Eh1gvaO9uz48+RTw4uI8w90bYKaLRmRcW83YQFXrLia73lnxHAedbcZzC:Eh1gvaQuk8cU4unwQaXW0YQ9rn3lnVd1
Score

7^/10

discovery persistence
- Loads dropped DLL
- Adds Run key to start application
  persistence
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2