095f7146fa541147f095284a6c2fd28024873ac754e5f87435c262ef8ba5b7df

General

Target
Instalador.zip
Size 150KB
Sample260804-tn4wlassfw
SHA256 095f7146fa541147f095284a6c2fd28024873ac754e5f87435c262ef8ba5b7df
MD5 3730451c207cca9d81b1edf616d4527c
SHA1 f648fd70832d8b718783613f043453a046aa90d1
SHA512 7fe2989d066349b556a79a3d3b9726c30ba16cb003d7d7a2a5a1f84dd0a5902c882868ecd28dac81a8515ce43c94543a14c0b41561c5495e34cdd3d74e3425b1
SSDEEP 3072:Os+qxe8pUP9/5nWeW0kd5iqihSq5pyW1Nfa8EkdY2l:O5qxJUP34D5iqihSq5pZLfa8zPl
TLSH
T10CE3124EA8D436193C48EE7334DB7206C50FA5627E5021832B7E16E38DEA85EFD19C5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Instalador.exe
- Size 175KB
- SHA256 f69020e880ec3e6f11e20f0b4e5b1505658f1aa67e37c45db17b7244e2955383
- MD5 7a808a1db2eefd8ea4c9950bba0caa48
- SHA1 7a34331ec0cf6acf1a45d61bedbf3f33f551a942
- SHA512 383a692e1c6ae9beaa9ad587a0e34184dba91425388e7a35a1d6e43c43d4b10bc7c527b799ce86ca87834dd30ac9d57fbbbf6edccf855ee2f157e6be28c5222f
- SSDEEP 3072:VOqXtuKuajptxtSBzQWJWl0W0kdYqr1lyYM5wQK7chfRlbmtuKuajptxtSBzQWJS:V9XtEQvtS1QVTDFr1lc1bmtEQvtS1QVp
- TLSH
  T13D04C0346196954FE43A37F51630E3908654BEC1346BDADE3ED0248FBD16390AA36EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

4

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2