General

  • Target
    tsetup-x64.6.9.3.exe
  • Size 50.6MB
  • Sample260721-a9gteact4v
  • SHA256 45aa94a591763118c5d3ba9481d3f97c0b95b5e56dc33c9b39311f7c46ee72c9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      tsetup-x64.6.9.3.exe
    • Size 50.6MB
    • SHA256 45aa94a591763118c5d3ba9481d3f97c0b95b5e56dc33c9b39311f7c46ee72c9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks