Overview

overview

8

Static

static

3

setup.exe

windows7-x64

8

setup.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    setup.exe

  • Size

    4.4MB

  • Sample

    241013-rp93wswakm

  • MD5

    31c60ca2d20d55dc124735018bc92680

  • SHA1

    bc7c9cf261ed9461210586501d2b76050ec1891f

  • SHA256

    bfccaf2911dfc5b56e8c8773aed6dd2cb08ac22ae9853365dbdd8b6f9a682571

  • SHA512

    5dd0132627a82d38ff18897f5dedc40bff52fbfc129d2a6aedde1e199d787bfd4b372b4d5c483939d1ea2a81688e7dadda27aed68cb7301542117c0a530a7e60

  • SSDEEP

    98304:Jf7wCQInrje/CAVMJy1W9kWR+66Bx1zR7CybRN:Jfn6/VSlyr66Bd7Cybb

Score
8/10
discovery

Malware Config

Targets

    • Target

      setup.exe

    • Size

      4.4MB

    • MD5

      31c60ca2d20d55dc124735018bc92680

    • SHA1

      bc7c9cf261ed9461210586501d2b76050ec1891f

    • SHA256

      bfccaf2911dfc5b56e8c8773aed6dd2cb08ac22ae9853365dbdd8b6f9a682571

    • SHA512

      5dd0132627a82d38ff18897f5dedc40bff52fbfc129d2a6aedde1e199d787bfd4b372b4d5c483939d1ea2a81688e7dadda27aed68cb7301542117c0a530a7e60

    • SSDEEP

      98304:Jf7wCQInrje/CAVMJy1W9kWR+66Bx1zR7CybRN:Jfn6/VSlyr66Bd7Cybb

    Score
    8/10
    discovery

    • Drops file in Drivers directory

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks