General

  • Target

    VRCHub Setup (1).exe

  • Size

    64.0MB

  • Sample

    240907-wyx7xaxepp

  • MD5

    1cf986e4d33e1a8a747669a254b86d71

  • SHA1

    6eb78630be370c5efb9142e4ec95cef6f659875e

  • SHA256

    231301ed9cd5650bd3766453eac3ff9286278f13367c1e5062f7bf5b2d97e26a

  • SHA512

    ffb42662eb2e3044681232fb404d1a995a6393f16e700c417c945dbae2cd5d19bbb2b4f62c12f059951d5abb7955abc40e01d5b47e8e4c024fb92a809fd5ef05

  • SSDEEP

    1572864:Q038VopLXRSUhmTSPND6MHrpG+KEFDs+w/4fyL/puYZYoS29E/JmE:QHSpLX0CN1RnwQfyL/ZYj2aIE

Score
8/10

Malware Config

Targets

    • Target

      VRCHub Setup (1).exe

    • Size

      64.0MB

    • MD5

      1cf986e4d33e1a8a747669a254b86d71

    • SHA1

      6eb78630be370c5efb9142e4ec95cef6f659875e

    • SHA256

      231301ed9cd5650bd3766453eac3ff9286278f13367c1e5062f7bf5b2d97e26a

    • SHA512

      ffb42662eb2e3044681232fb404d1a995a6393f16e700c417c945dbae2cd5d19bbb2b4f62c12f059951d5abb7955abc40e01d5b47e8e4c024fb92a809fd5ef05

    • SSDEEP

      1572864:Q038VopLXRSUhmTSPND6MHrpG+KEFDs+w/4fyL/puYZYoS29E/JmE:QHSpLX0CN1RnwQfyL/ZYj2aIE

    Score
    8/10
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks