54551f4b39f9045379c4ff93e0a8f81f2c3900b5157eeab6b41ff3f13e743372 | Triage

Sharing

General

Target

FreemakeVideoConverterSetup_8cdef71e-1133-de5d-9d65-f79b6bde10e0.exe
Size

993KB
Sample

240903-3j53jazfpj
MD5

e4996114d73b1bb24b7e67b034e24822
SHA1

d52043af823c2a6f7cb27dfd278638e4abd652b5
SHA256

54551f4b39f9045379c4ff93e0a8f81f2c3900b5157eeab6b41ff3f13e743372
SHA512

a5f67e60415450c11bc04744a45309abb0bbed4d733e3705b772d3d7d2424d2bf4f1976a4ef1b22e5a2df169f82fa2846e38fb2abd78508c3d2491201d264b7e
SSDEEP

12288:rSxG0wgUF888888888888W88888888888BAOeFC0bYgVa/ebO+08WLfvsvXBIJ3R:exGlPeFC0kq9IvsvXB+3HI1Vsr3Vd

Score

8^/10

discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  FreemakeVideoConverterSetup_8cdef71e-1133-de5d-9d65-f79b6bde10e0.exe
- Size
  
  993KB
- MD5
  
  e4996114d73b1bb24b7e67b034e24822
- SHA1
  
  d52043af823c2a6f7cb27dfd278638e4abd652b5
- SHA256
  
  54551f4b39f9045379c4ff93e0a8f81f2c3900b5157eeab6b41ff3f13e743372
- SHA512
  
  a5f67e60415450c11bc04744a45309abb0bbed4d733e3705b772d3d7d2424d2bf4f1976a4ef1b22e5a2df169f82fa2846e38fb2abd78508c3d2491201d264b7e
- SSDEEP
  
  12288:rSxG0wgUF888888888888W88888888888BAOeFC0bYgVa/ebO+08WLfvsvXBIJ3R:exGlPeFC0kq9IvsvXB+3HI1Vsr3Vd
Score

8^/10

discovery persistence privilege_escalation
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates processes with tasklist
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

Netsh Helper DLL

Privilege Escalation

Event Triggered Execution

Netsh Helper DLL

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Process Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistenceprivilege_escalation

behavioral2