8fadccf85d88741a6ae030679dde5bf1c62b9106ce9c7565b589512ad0c2a389

General

Target
Downloads.zip
Size 12.9MB
Sample260823-2ds1cabd74
SHA256 8fadccf85d88741a6ae030679dde5bf1c62b9106ce9c7565b589512ad0c2a389
MD5 ae3d9bf353c95c5b1fc90cb81fd0dda6
SHA1 173bbfa60515abc8c42570264e62d46a0cfe67a3
SHA512 449dd1a072243fc3c97e40715e7e23ebfc606748b44f9e651e175bb9085863ef5dd4c7a03e119ed514f4ac7220605252a239446d1595e50e0f3ac8f7395afa60
SSDEEP 393216:tZ3wmiol+fEOsT1BTsgh/pYREuuxDu60NqBgJdipTyL:qol60OQpYRKxp0NqBEdihyL
TLSH
T1CED633B89DC10B3A743CCAC74588A1EBD5341A5E906023DB07CF974B7A472735E3E69A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Downloads.zip
- Size 12.9MB
- SHA256 8fadccf85d88741a6ae030679dde5bf1c62b9106ce9c7565b589512ad0c2a389
- MD5 ae3d9bf353c95c5b1fc90cb81fd0dda6
- SHA1 173bbfa60515abc8c42570264e62d46a0cfe67a3
- SHA512 449dd1a072243fc3c97e40715e7e23ebfc606748b44f9e651e175bb9085863ef5dd4c7a03e119ed514f4ac7220605252a239446d1595e50e0f3ac8f7395afa60
- SSDEEP 393216:tZ3wmiol+fEOsT1BTsgh/pYREuuxDu60NqBgJdipTyL:qol60OQpYRKxp0NqBEdihyL
- TLSH
  T1CED633B89DC10B3A743CCAC74588A1EBD5341A5E906023DB07CF974B7A472735E3E69A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Madium.exe
- Size 12.0MB
- SHA256 6d6de8ce543029fb7fac8f940241975c4e1862b63b948d94af411dd9bb04c2e8
- MD5 4f71599a9d0ad49325d337e27e3e04ea
- SHA1 e80e8fa52b8f109ad14bd1ea7b44dbade4c5281e
- SHA512 89bfed0c869c0febfbfe3c387882bd14d8a0f003ccb1d712a705a072c3f94d982bcf375356fc74984170508489b216cc4a5d5e9602e71b300b47cd54fd422e8d
- SSDEEP 196608:vnXGTgw4cxwaE0DQk57BImaXRDpn+yEwT+:vWTgw4cKEQkdBImaXRDR+yEJ
- TLSH
  T178C6AE07F240C1F4C4AEC279C36B9636EA32B889452472AF17E45B512F2BE606F1D79D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

6^/10

defense_evasion discovery trojan
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral3 behavioral4
- Target
  RobloxPlayerInstaller-G9F766FYQP.exe
- Size 13.0MB
- SHA256 2d9372b6f31b6d0c12b13b23fe0e28d556d86c97277d6a9d13cac2c8cf49f1e1
- MD5 5786766febdbf9e5564cc22bded311ef
- SHA1 b9eb8b6689d1d0baa720de82cc7273457a7d818c
- SHA512 a943a75b020485c9f26d2d916fa5ae4cdca834b7b4b7c288de8fe1e793c2c3fd076f4ff844b783af69de363776173811c2ca0127894b077376714cc3a56a15ea
- SSDEEP 196608:sQ5I1Y6lgMxsMh/vlKV4BmJsuCnuE5P5edeL:sa+YWgMV/vk6BmyuCv5yeL
- TLSH
  T1CED69D5AB2B800E8D4BBD178CA565613EBB1741603709BDF17A046BA1F63BE46F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion discovery spyware trojan
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

1

T1112

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

3

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks whether UAC is enabled

Network Share Discovery

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6