General

  • Target
    Clarity Makcu V2.6 - Free.rar
  • Size 78.6MB
  • Sample260805-yfna4avdle
  • SHA256 959b5da0362bb7bd6f3e72da784ff2a1178d219947b97aba70bcbc10d25cc2f8
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      AI_Installation_Guide.pdf
    • Size 17KB
    • SHA256 2a6227b91fa6adb672220af14fbd56f5efeffbe1f59b5d99e72ef606ffb9a2a7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      extra/launcher.py
    • Size 490B
    • SHA256 b1118a792e0b1ff20dcfddda6259f9582f47ad04852ef530364c2eabbbe1f8e4
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      extra/main.cp310-win_amd64.pyd
    • Size 1.7MB
    • SHA256 79c9e1077d18814c0fa2d455a8fb9620e5c0f47e20280f23dc35e28373adf5d2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      installs.bat
    • Size 4KB
    • SHA256 1576f924c091b697b767344b7d518b63377e47d9ad4b7df9037160953c503676
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Command and Scripting Interpreter: PowerShell

      Powershell Invoke Web Request.

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      run.bat
    • Size 1KB
    • SHA256 be85d43a50af84de17d180aacc667cffbcc6666ea385435e220918195da3a475
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks