General
- Target TLauncher-Installer-1.9.5.1 (1).exe
- Size 25.5MB
- Sample260824-rmw39adg84
- SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
- MD5 de90bdf89be7e8f55b9ea1e9f0a88613
- SHA1 ea25984a475c95ad41abae25885db7b24514a7af
- SHA512 42f6cc77ea8cd43d167236e81e4164da7c8030605d7d1759494f41f5b9b5dcdbaec3b4d901f1925f13d915756b52ec22927e1dc304e89fb7f9342b84c475d188
- SSDEEP 786432:ytpZzp8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpTTuPKJBZlC39ORb
- TLSH T1014733357AA29072D772363496996339F77EAD70AB3802D322903D3C7E716C15A7C21B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target TLauncher-Installer-1.9.5.1 (1).exe
- Size 25.5MB
- SHA256 0619bd07d3183a8ae0cb1be408c6ad32295d47ddd666b2d51edd4d5f5d211227
- MD5 de90bdf89be7e8f55b9ea1e9f0a88613
- SHA1 ea25984a475c95ad41abae25885db7b24514a7af
- SHA512 42f6cc77ea8cd43d167236e81e4164da7c8030605d7d1759494f41f5b9b5dcdbaec3b4d901f1925f13d915756b52ec22927e1dc304e89fb7f9342b84c475d188
- SSDEEP 786432:ytpZzp8Q6W10rrKJBH5lFRqJkkt9O2B4Bi5e:ytpTTuPKJBZlC39ORb
- TLSH T1014733357AA29072D772363496996339F77EAD70AB3802D322903D3C7E716C15A7C21B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1Discovery
Network Service Discovery
1Peripheral Device Discovery
1Query Registry
4System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1