General

  • Target
    CamScanner-1.0.35-online4221817-x64-Setup.exe
  • Size 192.1MB
  • Sample260728-df5vxsaj2v
  • SHA256 ec2691d0e56a6672e0d0e68898992f13006a5d6a3df0e7770a32658b0c1c1433
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      CamScanner-1.0.35-online4221817-x64-Setup.exe
    • Size 192.1MB
    • SHA256 ec2691d0e56a6672e0d0e68898992f13006a5d6a3df0e7770a32658b0c1c1433
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Reads ssh keys stored on the system

      Tries to access SSH used by SSH programs.

    • Network Share Discovery

      Attempt to gather information on host network.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes a VBScript file via the Windows Script Host.

MITRE ATT&CK Enterprise v16

Tasks