Resubmissions

29/08/2024, 17:41

240829-v9k62svflq 10

29/08/2024, 17:38

240829-v74klstala 10

General

  • Target

    Launcher_v0.876 beta.rar

  • Size

    72.4MB

  • Sample

    240829-v74klstala

  • MD5

    70b20439eecd57070954b18fa42c48b3

  • SHA1

    09357c9092186bbf245eadc974e6d8967409a5db

  • SHA256

    f7d5a015e77fd189e9e8a7a5b8453397d63f1958032cb17629691a2da888bb6e

  • SHA512

    e67d3b528786a2d8090bcbca60e205da8b036a401380e6919397d11268b3f053228279b0f64d9e37e3ab443d83b6271f9db44e97747c64cb8c439d8ffdf8432b

  • SSDEEP

    1572864:ml2+D9daGFeBTbxW2fwDIPFEnLH0bHymWpRsQ0eKHe6Zz1lAqDcSzHiR14:6jD9dOS/DIPFVz0fiHvZzsSriR14

Malware Config

Targets

    • Target

      Launcher_v0.876 beta.exe

    • Size

      75.4MB

    • MD5

      be2a85fc60c15682bd64055f1222c59e

    • SHA1

      0223e9103c63b9a7ea84121871f7fd823905f95e

    • SHA256

      6ac60acecec3832cbcdf8c593489e394619a433da7806ad0f29aa6e618078c2f

    • SHA512

      358ce8869f4d334501cf35d2f4451c335d7976ec615503c1e0cc117054e1cbba0db42e7e55ae909fa62ba89e13856dddf1d262c275979c0da9009337a2bdb282

    • SSDEEP

      1572864:wvhQ6l777vDSk8IpG7V+VPhqWK8pE7WTDlPNiY4MHHLeqPNLtDSHWzZp1+K:wvh1JPSkB05awWK8TTD5CMHVLtOa9r

    • Enumerates VirtualBox DLL files

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks