Overview

overview

10

Static

static

10

MBSetup.exe

windows7-x64

8

MBSetup.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    antivirueses.zip

  • Size

    72.5MB

  • Sample

    240824-mkap1swbjc

  • MD5

    b32657119f47584e0690fe963dc19066

  • SHA1

    e51370924321fb57fd5ac6b17ad5a08f23d94cc7

  • SHA256

    0f4d4462a002437dd96462df09c8ab92931b87accafeec923072591eff55fbb5

  • SHA512

    afe9799772a0b85be5d9a20f9bfc68f0abda21bdbf54765403e4e022560982c94c9aa6686cfa67ae935c5d63e942f049ab704c3e7ef5f8e80b88e4a202decd9a

  • SSDEEP

    1572864:zdBLDvMitoJCBWSDDY2EelMFEwSwT2CPB3uTnLz8hRrl:xBLD7sCsr2zkEwLD3uTnLCRrl

Score
10/10
blackguarddiscoveryupx

Malware Config

Targets

    • Target

      MBSetup.exe

    • Size

      2.5MB

    • MD5

      d21bf3852bb27fb6f5459d2cf2bcd51c

    • SHA1

      e59309bbe58c9584517e4bb50ff499dffb29d7b0

    • SHA256

      de9c4e8b4b0c756eee4e39221c1e4e0e11c2e67effb828e27de3c4b4470ccff2

    • SHA512

      17bc7740f131a1d4e84fd7e4ab5e1ce510660f5046340ef6d09ef99c56c88da2b6be3ae5c5ddb7213841c506eaec147c65abba1a7a2a8eb4fb8f6329bbaa03d1

    • SSDEEP

      49152:FMofPlPU+QG/rOVcVz6StQyfvE0Z3R0nxiIq2dsTDwfw1Y:FMslc+QGjuTKtQRq261Y

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks BIOS information in registry

      BIOS information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks