Overview

overview

7

Static

static

3

TinyCAD-2.60.01.exe

windows10-2004-x64

7

TinyCAD-2.60.01.exe

windows11-ltsc_2024-x64

7

$DOCUMENTS...R0.exe

windows10-2004-x64

7

$DOCUMENTS...R0.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ns.dll

windows10-2004-x64

3

$PLUGINSDI...ns.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...dl.dll

windows10-2004-x64

3

$PLUGINSDI...dl.dll

windows11-ltsc_2024-x64

3

$R9/$R0.exe

windows10-2004-x64

7

$R9/$R0.exe

windows11-ltsc_2024-x64

7

TinyCAD.chm

windows10-2004-x64

1

TinyCAD.chm

windows11-ltsc_2024-x64

1

TinyCad.exe

windows10-2004-x64

3

TinyCad.exe

windows11-ltsc_2024-x64

3

iconv.dll

windows10-2004-x64

3

iconv.dll

windows11-ltsc_2024-x64

3

libpng13.dll

windows10-2004-x64

3

libpng13.dll

windows11-ltsc_2024-x64

3

zlib1.dll

windows10-2004-x64

3

zlib1.dll

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    TinyCAD-2.60.01.exe
  • Size 2.4MB
  • Sample260808-plndls1sg1
  • SHA256 fc42f3a200e5fbc2d7a431daa42b6a431077690f9cf2c5dbf983f35ef22377b2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryinstaller

Malware Config

Targets

    • Target
      TinyCAD-2.60.01.exe
    • Size 2.4MB
    • SHA256 fc42f3a200e5fbc2d7a431daa42b6a431077690f9cf2c5dbf983f35ef22377b2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

      discovery

    • Drops file in System32 directory

    behavioral1behavioral2
    • Target
      $DOCUMENTS/TinyCAD Examples/$R0
    • Size 18KB
    • SHA256 911ea23213f74bd08638f8cc5235f9808132268d65540dfbe9e5c0aaa8002d2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    behavioral3behavioral4
    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 12KB
    • SHA256 a505e6c537a5ce0166227dda9f7671605395592ac9f1a3764e8a01b713939db1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      $PLUGINSDIR/nsisdl.dll
    • Size 12KB
    • SHA256 2c92de134c1f4f9e1d11fcc7f63744642abb21d2017cefd05df4ddd1207ceabc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral7behavioral8
    • Target
      $R9/$R0
    • Size 18KB
    • SHA256 911ea23213f74bd08638f8cc5235f9808132268d65540dfbe9e5c0aaa8002d2e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discovery

    • Executes dropped EXE

    behavioral10behavioral9
    • Target
      TinyCAD.chm
    • Size 280KB
    • SHA256 d69ed8eaac9fd27a4f6b9a4f960e16b165290df379a44c87ca25a78636bfb7af
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      TinyCad.exe
    • Size 1.3MB
    • SHA256 7e97f2a196e6ba982b25c82d0a56545c9aebd60c121519fff73b7f5dfacb1d37
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral13behavioral14
    • Target
      iconv.dll
    • Size 872KB
    • SHA256 6c1515881ed377c0821f14ba079ffd51cc8d910c4b20581f3d19f423b78847f2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral15behavioral16
    • Target
      libpng13.dll
    • Size 128KB
    • SHA256 b0c41a753b05dc2ca9f96b1539bc8aba0385fb57981e5b765afa2e494f5fea29
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral17behavioral18
    • Target
      zlib1.dll
    • Size 54KB
    • SHA256 2b6a6a55016c7cfeb5e8434b822743e48d53af879da70b84e4dcd1e205731a82
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral19behavioral20

MITRE ATT&CK Enterprise v16

Tasks