49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420

Sharing

Copy URL Twitter E-mail

General

Target
SetupImgBurn_2.5.8.0.exe
Size 3.0MB
Sample260718-cwgmlads9q
SHA256 49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420
MD5 4bf2b8f4b46385bfda4d65e423cfb868
SHA1 6a3d20796e1fcd4169d5d339af6e491dcea3367c
SHA512 18f12d78316da2210a7cf0506c6f2e6d1634800697e5bd60bd402597f5cc590f96f97e42878caafae3f3bc12807b715a64aa6a81f8b5ece6343cebd2a4066375
SSDEEP 49152:2ufgi/X54lqSE7QSmNk/dX1kB+0WIQbIu7OMK0Efs+0KlCSPvUYttV4PrmVDOl8f:2cXn7vmih1kB+lF57EsDKwS5ttV4Prkj
TLSH
T1ECE533B23462E85BE6930C7B22C227F3C169BB41E5E785BF4345FD2B11D0275C67162A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SetupImgBurn_2.5.8.0.exe
- Size 3.0MB
- SHA256 49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420
- MD5 4bf2b8f4b46385bfda4d65e423cfb868
- SHA1 6a3d20796e1fcd4169d5d339af6e491dcea3367c
- SHA512 18f12d78316da2210a7cf0506c6f2e6d1634800697e5bd60bd402597f5cc590f96f97e42878caafae3f3bc12807b715a64aa6a81f8b5ece6343cebd2a4066375
- SSDEEP 49152:2ufgi/X54lqSE7QSmNk/dX1kB+0WIQbIu7OMK0Efs+0KlCSPvUYttV4PrmVDOl8f:2cXn7vmih1kB+lF57EsDKwS5ttV4Prkj
- TLSH
  T1ECE533B23462E85BE6930C7B22C227F3C169BB41E5E785BF4345FD2B11D0275C67162A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 3KB
- SHA256 0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
- MD5 8614c450637267afacad1645e23ba24a
- SHA1 e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA512 af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
- TLSH
  T1AE717387378506B7D08006303089BCAA3B9E9A350F5B59BFD6DBA99F7C641F4E134706
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH
  T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 bedcdb63f027107c471fe244554c3038fb4caf9f96f7eab2d430f76f2f4f768b
- MD5 a3f1e5d94d8e07121bad59af16ef358a
- SHA1 9223fa516807ec103e5381ce8b2b7295a846a89f
- SHA512 6b466ff8dd9855048dcdd3b21760bd0cce77b1aed561d8cf2099089b97910f8d2da86970a2023c59e1807a45138cc25fcb899f9df67845bdf22a44ec7b491050
- SSDEEP 96:riqPXbjaKyFU40KhveE+6nrh9MXEiGDdoDxUxOLqtJ1taRhElfRx2:riqPXaKy1k4h9kvDxUxj/tWgfRx2
- TLSH
  T117F1E8BEF7C009F2CA4B56302C176B078F56A631432561B39A6356CA75C15F3ED25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  $PLUGINSDIR/ioSpecial.ini
- Size 211B
- SHA256 d95aed234f932a1c48a2b1b0d98c60ca31f962310c03158e2884ab4ddd3ea1e0
- MD5 e2d5070bc28db1ac745613689ff86067
- SHA1 282e080b4cf847174c5c11e4f9157b8c338ecb19
- SHA512 a50ca2014869629135b54e848f03cb4983ad8029cd811300d02b0fc54de0436185f418fea4d3db888eb0f3170e33a59d486aa885f024ab29e630e9bc0ae1a2de
- TLSH
  T1D3D0C9C9501A802944208642A97A2FA263E03E210B1725FAF5724C87EB4CDE79C9D682
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral6
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 9KB
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- TLSH
  T1D312A8869D83DC42EC4F7F71E3E6A05320E0690A052FBAD56F3634D6E65F88B672410B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7
- Target
  $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH
  T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral8
- Target
  ImgBurn.exe
- Size 2.6MB
- SHA256 02c74678128a9dfef58eab5abe269382c6b4862440c26c22cde7b83868f478f1
- MD5 4776c25e4ffda40783df8d31217ed085
- SHA1 8dfeb7da315ee2f5ccc59b1cbfd9e60b74f17fc3
- SHA512 8ef9677f52a5fcfb0da7c34defc03a2c449962dabe468c57a3c4bf9cd7a21997e348252ace05da5a60e809b2305fa320c95f79376cc75feae83b698e60744bac
- SSDEEP 49152:mjFpUHdWtSyTHF9FilJ/i1Lh8sqBrpGEXtx3VIL+zqXlnsvzXi08GzFt:BHdFojiuLusqBdGutxVuXOU
- TLSH
  T13FD53390CBE53916DA4D7DB0492AD92037D37E194A024D3F6B98B80F7D32783227B65E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral9
- Target
  ImgBurnPreview.exe
- Size 209KB
- SHA256 363f61889adaf3ee4bb95bda5f6d7cb1d7c906b61c310c8e98ad02717c5203f9
- MD5 ad46f2b6d9bbd7c271e6b67df3a00695
- SHA1 a929f7c87f659253c25cbf786a81180a4dca0e3d
- SHA512 af72e7d61cbcef34258ec819041dbc7747862070882c8390df939a6483fbcfa0d1635be16cb5720dc74f551f8ec426da1c5157fe65664b592c70fc893de59ab6
- SSDEEP 3072:Em1BzKL2lZ33qxjrzVcol6gUjywWHlGvakyvVuk2AQ4w/vvoutc:LLzL33qxjWoG19xCuzAQn/XoS
- TLSH
  T1A62412A647E21B4EE69504374DB7FA0A5628BD3165290FEF20D4302FDD72261EA0F52F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral10
- Target
  ReadMe.txt
- Size 13KB
- SHA256 8b9d97c137459a495936af47f5140fe75f795728a30e9ec3d8ac9c1cb2e5c65f
- MD5 06a5df751eb0765e69bfb15e12f4c665
- SHA1 7394bf7df2dda47bf8d55bfbc880d2a2316054ac
- SHA512 aabd6aa18646192bd49e5343e0129e696b1e003a16e8205fd36aa863be9c97aadf9ac67bba96629d21ea5921e89ce6a401e74d9347aa77468f3854dc64e20558
- SSDEEP 384:/GytFQEuWAUJTN3zLDwm/Fx30pnNbIO6GusyiqE0:eqFQEubUJRUcIuO3uEqv
- TLSH
  T1405256B6670603B1085051E3AA2CF8E0B604E05CEBAB4B1434FDC22D7652BBE55AF1F9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10

ransomware
behavioral11
- Target
  Sounds/Error.wav
- Size 35KB
- SHA256 acad74b9bb57809e1b35bc06f357941986ebdc547ba33fc618f07e6e7bdc49bd
- MD5 efad8c5d6cc6cae180ebe01ce3a60c88
- SHA1 614839975c1f07161f3c26ba2af08ae910b21c61
- SHA512 d404752e05ee803958a21b7fcadc0782ba36ea42eba84eae42eca6360df71822bc705eea6ef2caaa82e2fdcc518ba1cd94c04cc7e7e7739d32eb29dbffd2f51a
- SSDEEP 768:R4vVGwokwkbii/GMCHCQ6baGkfS2clSW4EHN9sHJe:G9GwvOMDCV6b+fg4EAJe
- TLSH
  T116F2AEDB52836801590782B9FE2D43ACF3985DF1C0AEC3A06126FDA645B7574C4EEE86
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral12
- Target
  Sounds/Success.wav
- Size 66KB
- SHA256 8dae19fc9c722a7fb169f37b5881e74551a8d3b8b43ec6f52b6d5d46e885ed6c
- MD5 fd8177d61c8dd032dd262bf979d852f6
- SHA1 ac64e21b7c80e996bcb369b6023bec4191568a52
- SHA512 39e75172a2b410eb25de87f06c57e1c583493f1885a39f2a410ce6437cc8e9d400a3e8e695cdcec63752840096637a16c1d875e43ce1c40e43553f16337ff835
- SSDEEP 1536:uQ4BvC7uGEQ9mBvqSt/YMJOEOR7sWMdmxm5ovXD5yk3R:u7BKtEQYByq/YUMbMdmQ2/L3R
- TLSH
  T18C63EBF3A8F034663A4797B5FF2E96ACF182ACE5D9ACB3C51124DE96006652CC4D5E03
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13
- Target
  uninstall.exe
- Size 72KB
- SHA256 1b5cb8035b18d06b5219f2e7d30200ca343c0ce6763962c7c41534aecc2b1c80
- MD5 eff839d29dbb06677a85117d036e29c6
- SHA1 473823c718f3db95d27f14b783e68c08f13caded
- SHA512 cb4fb2b054e3430df934cd30be220e13c2f86bf2dbc6e2a46d59fa4f7d9c6feca9cbc44fb1cc49bfae7aa39623d26d8f4510fa9a0584a1f64110cae87117aff3
- SSDEEP 1536:oRPYqa5pic6jXFdL2KiMcH8gg+SsN7buCryG4DelpkF1LSQHYc:MPA6jXFN2McH8b+vnuCryGmjGS
- TLSH
  T16773CF1632D0C4FBD55B06708DBBC7B9D7B3B6B40116929B27906F6F6C712C2CE1229A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral14
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral15
- Target
  $PLUGINSDIR/modern-header.bmp
- Size 9KB
- SHA256 766a893fe962aefd27c574cb05f25cf895d3fc70a00db5a6fa73d573f571aefc
- MD5 940c56737bf9bb69ce7a31c623d4e87a
- SHA1 f2f3b4e7b9c28df6687ceeaed300a793e3bac445
- SHA512 81c60431619d7eb826b8da997c227c4f7077cc754caa15df6e0e7ae0e33690432bc2a27a7e295998f15e33a17b3d80e492d7cc09fd70dc43daf1cfe86b8746ff
- SSDEEP 192:TYw3C/LSnMoejFXnknIHbGoijTr3dBZ9KPPsnY/T0x9j:TY3LSnlepnknIHKoUrdBZ9uPsY/Ix9j
- TLSH
  T1D312A8869D83DC42EC4F7F71E3E6A05320E0690A052FBAD56F3634D6E65F88B672410B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral16

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Enumerates connected drives

Drops file in System32 directory

UPX packed file

UPX packed file

UPX packed file

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16