d560c4553c338ecb4afd4216d5991da8a7be3cd191ddf0609d162025066f0340

Sharing

Copy URL Twitter E-mail

General

Target
DellInstaller_x64.exe
Size 177KB
Sample260810-fn2vca1gnd
SHA256 d560c4553c338ecb4afd4216d5991da8a7be3cd191ddf0609d162025066f0340
MD5 94316901dbb622cb9e03f49bf4cfe904
SHA1 1a786cf9ce3789a01e7d79bae74a05b7faf85a38
SHA512 1cec4501564c695542e9a691e25a560ba708e031138a0e69f1c4202cb38b403b358d445b9ba7b6bfb52fd4ce517926b87b7697ca39b711b22d6e77ebde48f05e
SSDEEP 3072:QZMytaYNn3hc2jib1nbmPUXUKbmjUXJcib1nbmPUXUKbmjUXJ/6K0K/9:SaYnRljib1bpXUW1XJcib1bpXUW1XJLj
TLSH
T1D8048D692BC4435CF1F34B79B8B2001E8D3CB027B9619AAD791C32546F733188665BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

Malware Config

Targets

- Target
  DellInstaller_x64.exe
- Size 177KB
- SHA256 d560c4553c338ecb4afd4216d5991da8a7be3cd191ddf0609d162025066f0340
- MD5 94316901dbb622cb9e03f49bf4cfe904
- SHA1 1a786cf9ce3789a01e7d79bae74a05b7faf85a38
- SHA512 1cec4501564c695542e9a691e25a560ba708e031138a0e69f1c4202cb38b403b358d445b9ba7b6bfb52fd4ce517926b87b7697ca39b711b22d6e77ebde48f05e
- SSDEEP 3072:QZMytaYNn3hc2jib1nbmPUXUKbmjUXJcib1nbmPUXUKbmjUXJ/6K0K/9:SaYnRljib1bpXUW1XJcib1bpXUW1XJLj
- TLSH
  T1D8048D692BC4435CF1F34B79B8B2001E8D3CB027B9619AAD791C32546F733188665BBB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral1 behavioral10 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10