Overview

overview

7

Static

static

3

1337v3 setup.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1337v3 setup.exe

  • Size

    3.4MB

  • Sample

    240928-ct1mpasaql

  • MD5

    4c75ef26b3ebdd27f01d5184f8b29558

  • SHA1

    eef93934c7136b973f7339d8a61c36cd09c65b5d

  • SHA256

    dc84efd6a2fb51aaa7e69a8674e4b2c60ceb48c3bff06a8e35777c6abb29569d

  • SHA512

    8164093bc984b911dab71b7a8c0cd69c8f694bbaebf7bb78d29eb1c142eeb9e282a1f7f8ef768aa27f1905e686bcbc6fc796543078b5a3d0467e63b7f77591d8

  • SSDEEP

    98304:9wRExOWP5ypYDj7nBOHMT2lG2NP8N52rYHu:37PT7nBOG2lG2NP8DO

Score
7/10
discovery

Malware Config

Targets

    • Target

      1337v3 setup.exe

    • Size

      3.4MB

    • MD5

      4c75ef26b3ebdd27f01d5184f8b29558

    • SHA1

      eef93934c7136b973f7339d8a61c36cd09c65b5d

    • SHA256

      dc84efd6a2fb51aaa7e69a8674e4b2c60ceb48c3bff06a8e35777c6abb29569d

    • SHA512

      8164093bc984b911dab71b7a8c0cd69c8f694bbaebf7bb78d29eb1c142eeb9e282a1f7f8ef768aa27f1905e686bcbc6fc796543078b5a3d0467e63b7f77591d8

    • SSDEEP

      98304:9wRExOWP5ypYDj7nBOHMT2lG2NP8N52rYHu:37PT7nBOG2lG2NP8DO

    Score
    7/10
    discovery

    • .NET Reactor proctector

      Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks