Resubmissions

13-08-2024 08:41

240813-klh2nstfje 10

13-08-2024 08:34

240813-kgp97aybnm 7

13-08-2024 08:31

240813-ke339stcnh 7

13-08-2024 08:22

240813-j9la9stama 10

13-08-2024 08:15

240813-j5ww7sxeqm 10

13-08-2024 08:11

240813-j3kq6axdpl 6

13-08-2024 08:07

240813-jz4d4aseke 10

General

  • Target

    free-vpn-3.2-installer_96-miv1.exe

  • Size

    1.7MB

  • Sample

    240813-kgp97aybnm

  • MD5

    2798a45b6137fdc262bc01d6c13a2c7d

  • SHA1

    743587eb5afd358591146b8222d2b97d82cb9d1f

  • SHA256

    d69299761308057d6288300f98222484af40c1ebc98432bcbcc9c737ac219245

  • SHA512

    4c8b70261ec5fe915b2c3dcfb6ff644873adcf0d8abb1ba83be30eb600bf1c7fbd6bbd5d0730a610f129e3492517e7cd77e882e9f7b3bfa214e73bfbd361be1b

  • SSDEEP

    24576:W7FUDowAyrTVE3U5F/XkbjztjfSKh7P/1Ks6vk9XpSwR1HNmJrFxgzUsYz:WBuZrEUcztdqAXpSwRWNQ9Y

Malware Config

Targets

    • Target

      free-vpn-3.2-installer_96-miv1.exe

    • Size

      1.7MB

    • MD5

      2798a45b6137fdc262bc01d6c13a2c7d

    • SHA1

      743587eb5afd358591146b8222d2b97d82cb9d1f

    • SHA256

      d69299761308057d6288300f98222484af40c1ebc98432bcbcc9c737ac219245

    • SHA512

      4c8b70261ec5fe915b2c3dcfb6ff644873adcf0d8abb1ba83be30eb600bf1c7fbd6bbd5d0730a610f129e3492517e7cd77e882e9f7b3bfa214e73bfbd361be1b

    • SSDEEP

      24576:W7FUDowAyrTVE3U5F/XkbjztjfSKh7P/1Ks6vk9XpSwR1HNmJrFxgzUsYz:WBuZrEUcztdqAXpSwRWNQ9Y

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Downloads MZ/PE file

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks