Resubmissions

06-08-2024 13:23

240806-qna2qszgkp 10

06-08-2024 13:20

240806-qla9qazfpm 7

General

  • Target

    Robokits_USB_BT_18_ServoCon_Setup_V82.exe

  • Size

    3.1MB

  • Sample

    240806-qla9qazfpm

  • MD5

    e0017606ff7935c846769b617a522c90

  • SHA1

    ccbc102781a64f7936310e8f25028101ac3ff353

  • SHA256

    0226f723ff835d0b46269c1b896fa18fef0a8ed24dc3c72872dcf4cb45be90f9

  • SHA512

    b904262e8eea28f2229f6b670cf0240314626a8736aa90ed86f7c254cbe461190f1ba0976794b08dd11242b577c29bf3b2d5d767d910ad48889697a0e0cc34c5

  • SSDEEP

    49152:sN26FOnzGn6LJvqkwnpC+mWd6uIcc+vo7dP6dF/WPxDz0peWUiz8ahxkYu:s06FOznLo0+Dd6uxc+vqYdF/WPxDIXxI

Score
7/10

Malware Config

Targets

    • Target

      Robokits_USB_BT_18_ServoCon_Setup_V82.exe

    • Size

      3.1MB

    • MD5

      e0017606ff7935c846769b617a522c90

    • SHA1

      ccbc102781a64f7936310e8f25028101ac3ff353

    • SHA256

      0226f723ff835d0b46269c1b896fa18fef0a8ed24dc3c72872dcf4cb45be90f9

    • SHA512

      b904262e8eea28f2229f6b670cf0240314626a8736aa90ed86f7c254cbe461190f1ba0976794b08dd11242b577c29bf3b2d5d767d910ad48889697a0e0cc34c5

    • SSDEEP

      49152:sN26FOnzGn6LJvqkwnpC+mWd6uIcc+vo7dP6dF/WPxDz0peWUiz8ahxkYu:s06FOznLo0+Dd6uxc+vqYdF/WPxDIXxI

    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks