Overview

overview

7

Static

static

3

Masterstrap.exe

windows10-2004-x64

1

Masterstrap.exe

windows11-ltsc_2024-x64

1

Masterstrap.exe

windows10-2004-x64

7

Masterstrap.exe

windows11-ltsc_2024-x64

6

Microsoft....re.dll

windows10-2004-x64

1

Microsoft....re.dll

windows11-ltsc_2024-x64

1

Microsoft....ms.dll

windows10-2004-x64

1

Microsoft....ms.dll

windows11-ltsc_2024-x64

1

Microsoft....pf.dll

windows10-2004-x64

1

Microsoft....pf.dll

windows11-ltsc_2024-x64

1

System.Sec...ta.dll

windows10-2004-x64

1

System.Sec...ta.dll

windows11-ltsc_2024-x64

1

WebView2Loader.dll

windows10-2004-x64

1

runtimes/w...er.dll

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    MASTERSTRAPPP.rar
  • Size 9.3MB
  • Sample260819-flwwbayxft
  • SHA256 f22a778c29b7f6d94ed13830606b61487cf5ca9f4625937a95acd6ff2b97a9d3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Targets

    • Target
      Masterstrap.dll
    • Size 18.9MB
    • SHA256 99bee3c28a2957da3914734bc98bfaec1da8ba43501ccc0134757244cf84d09a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Masterstrap.exe
    • Size 213KB
    • SHA256 50ca21aa6b32b6c471ca522372cbefb75a7a2144dee951894be478fde1129811
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral3behavioral4
    • Target
      Microsoft.Web.WebView2.Core.dll
    • Size 635KB
    • SHA256 bb397d03342c76bd308ade82f5b7e8ced00df59459799ffc93a38c3a882b3398
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral5behavioral6
    • Target
      Microsoft.Web.WebView2.WinForms.dll
    • Size 38KB
    • SHA256 c3062ac43c9bca7260c77a630bdb2834f38e529226796dac6d77b30f010e5bbd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral7behavioral8
    • Target
      Microsoft.Web.WebView2.Wpf.dll
    • Size 81KB
    • SHA256 1e9ff65c05cdcf7bd56fe617e9b1fcc7b4a51503604ac80de14bcc9fbf54c509
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral10behavioral9
    • Target
      System.Security.Cryptography.ProtectedData.dll
    • Size 37KB
    • SHA256 ce7f4b80de12f227ac637915470c5b6b6a5d716456835caaa0b1600c3cbdcb6c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral11behavioral12
    • Target
      WebView2Loader.dll
    • Size 155KB
    • SHA256 1ac87267e52ccdf5621678697f948030307a650ca56f38f69e74c7cfaf9605c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral13
    • Target
      runtimes/win-x64/native/WebView2Loader.dll
    • Size 155KB
    • SHA256 1ac87267e52ccdf5621678697f948030307a650ca56f38f69e74c7cfaf9605c6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral14

MITRE ATT&CK Enterprise v16

Tasks