511e2f22c59c29d899a22923eaed91795c1354172d8e0f2a453933d3e7eb8247

Target
MA2 Dual NSP Emulator.exe
Size 17.7MB
Sample260709-wktybsfs2n
SHA256 511e2f22c59c29d899a22923eaed91795c1354172d8e0f2a453933d3e7eb8247
MD5 e8d2560d18b4d00089750baa2a799f32
SHA1 329409a8b15e609250e00d1b139223c282ec8d4a
SHA512 2118dc43698b356dccf010bbfc15f72c363d057e857f9d19d10237bf48d0235f1f9cd289be60fb7e7012681964e6ffd9d0b2e953f8266b84519b1976b74061b7
SSDEEP 393216:DOL3/dvQ8fT0vW+eGQReMTozGxu8C0ibfbau5qW80hoA/gEc64kNB:SpQKT0vW+e5RfoztZ0y5qW80h2hENB
TLSH
T1CB173344630508F5F5DA8337A550CA7B5233BC1223B8A59627ECBD673BFB1828E78764
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  MA2 Dual NSP Emulator.exe
- Size 17.7MB
- SHA256 511e2f22c59c29d899a22923eaed91795c1354172d8e0f2a453933d3e7eb8247
- MD5 e8d2560d18b4d00089750baa2a799f32
- SHA1 329409a8b15e609250e00d1b139223c282ec8d4a
- SHA512 2118dc43698b356dccf010bbfc15f72c363d057e857f9d19d10237bf48d0235f1f9cd289be60fb7e7012681964e6ffd9d0b2e953f8266b84519b1976b74061b7
- SSDEEP 393216:DOL3/dvQ8fT0vW+eGQReMTozGxu8C0ibfbau5qW80hoA/gEc64kNB:SpQKT0vW+e5RfoztZ0y5qW80h2hENB
- TLSH
  T1CB173344630508F5F5DA8337A550CA7B5233BC1223B8A59627ECBD673BFB1828E78764
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Loads dropped DLL
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Loads dropped DLL

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2