General
-
Target
CircuitMakerSetup_2.3.0.3.exe
-
Size
21.8MB
-
Sample
240930-y1ymkatbrk
-
MD5
e91a57d78e30b203b4e09e75196a62bc
-
SHA1
8a35514e391556233a51b57bd8da9fdb0ae92b4e
-
SHA256
d913d81d4deb372e878e93bd4b35909b651a570a82389c370dc27bf5dc5a0ca8
-
SHA512
d556509b2190a68ea3bb15ec7a1ba5781c3ecc33f7214169c54d567761bb233dbbde868787c7b4d5b4ff9b45d327c057a73708babd962ad98c893afcfed029bf
-
SSDEEP
393216:BUPweEgxFJR7nzNQTCQmzeXdEqUCDLJZ1HW+q/tgLIKvjmf1UzunQ1PvjhJ3vvLK:ZRTYqU0qlOl21UCQ5D3v7K
Static task
static1
Behavioral task
behavioral1
Sample
CircuitMakerSetup_2.3.0.3.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
CircuitMakerSetup_2.3.0.3.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
CircuitMakerSetup_2.3.0.3.exe
-
Size
21.8MB
-
MD5
e91a57d78e30b203b4e09e75196a62bc
-
SHA1
8a35514e391556233a51b57bd8da9fdb0ae92b4e
-
SHA256
d913d81d4deb372e878e93bd4b35909b651a570a82389c370dc27bf5dc5a0ca8
-
SHA512
d556509b2190a68ea3bb15ec7a1ba5781c3ecc33f7214169c54d567761bb233dbbde868787c7b4d5b4ff9b45d327c057a73708babd962ad98c893afcfed029bf
-
SSDEEP
393216:BUPweEgxFJR7nzNQTCQmzeXdEqUCDLJZ1HW+q/tgLIKvjmf1UzunQ1PvjhJ3vvLK:ZRTYqU0qlOl21UCQ5D3v7K
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Access Token Manipulation
1Create Process with Token
1Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1