Overview

overview

10

Static

static

10

Rewind.Lau....1.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rewind.Launcher.Setup.2.1.1.exe

  • Size

    433.9MB

  • Sample

    241231-rt9ypaxjgr

  • MD5

    fc9b58898fdd4dfa02f7a5f28d6e143f

  • SHA1

    c3c403a630e15723b39a2b1f2e3516498fcd23da

  • SHA256

    c849c95b2970dc43fd1cc20646d9694d463b49c2e63c2ea310b063ce193dd62e

  • SHA512

    a65c8148f21e8aa70b05e2afbde9c3b2dcf14ed652997dae84838219de0a9b63440da8363346f51673828e66677f3b9374a68ab9537fd5cd46d46bf311b3fce6

  • SSDEEP

    6291456:vwDsUG+/mD50jlnitpH7f9tBB7i0KUUrcBaemYBNsIWTKiHdHrZB93lPkQ:wADaZirbtB73KUk8ae6TPr

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      Rewind.Launcher.Setup.2.1.1.exe

    • Size

      433.9MB

    • MD5

      fc9b58898fdd4dfa02f7a5f28d6e143f

    • SHA1

      c3c403a630e15723b39a2b1f2e3516498fcd23da

    • SHA256

      c849c95b2970dc43fd1cc20646d9694d463b49c2e63c2ea310b063ce193dd62e

    • SHA512

      a65c8148f21e8aa70b05e2afbde9c3b2dcf14ed652997dae84838219de0a9b63440da8363346f51673828e66677f3b9374a68ab9537fd5cd46d46bf311b3fce6

    • SSDEEP

      6291456:vwDsUG+/mD50jlnitpH7f9tBB7i0KUUrcBaemYBNsIWTKiHdHrZB93lPkQ:wADaZirbtB73KUk8ae6TPr

    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks