General
-
Target
MBSetup.exe
-
Size
2.1MB
-
Sample
240917-cray9azerl
-
MD5
5d70ee40cce86efe0b8d5b262451c1ee
-
SHA1
6099f673466f68c35bf4fae4ad1e277fbf49fb67
-
SHA256
5a0e076885de7d99e5bb8d869d151aa87b11545fed6c4e1aca4d42984a71839a
-
SHA512
8f3c750c8524b1356ead6d16576c6a55084c9155d5a8ae6b85a9a0733379b317eccd2d16a5921b1eb2e5b4c31c2ef4bad4d47a97de25dd926afa5fbc7c5a7093
-
SSDEEP
24576:OudxHNUAYCdZNWt7XoV2XdnrZ4EwCxSNCLOrEH7S:nHNwGz47Xo8dnrZ4EwCxRQ
Static task
static1
Behavioral task
behavioral1
Sample
MBSetup.exe
Resource
win7-20240729-en
Malware Config
Targets
-
-
Target
MBSetup.exe
-
Size
2.1MB
-
MD5
5d70ee40cce86efe0b8d5b262451c1ee
-
SHA1
6099f673466f68c35bf4fae4ad1e277fbf49fb67
-
SHA256
5a0e076885de7d99e5bb8d869d151aa87b11545fed6c4e1aca4d42984a71839a
-
SHA512
8f3c750c8524b1356ead6d16576c6a55084c9155d5a8ae6b85a9a0733379b317eccd2d16a5921b1eb2e5b4c31c2ef4bad4d47a97de25dd926afa5fbc7c5a7093
-
SSDEEP
24576:OudxHNUAYCdZNWt7XoV2XdnrZ4EwCxSNCLOrEH7S:nHNwGz47Xo8dnrZ4EwCxRQ
-
Detects Floxif payload
-
Drops file in Drivers directory
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-