a3d95804f4bb62d1618dde448f0f2f2e6073ed660f1f96d88ca41ee368cefe6a

General

Target
UWT4.zip
Size 209KB
Sample260826-g3y8fashpc
SHA256 a3d95804f4bb62d1618dde448f0f2f2e6073ed660f1f96d88ca41ee368cefe6a
MD5 e668044896aeaf341e15f441f7c2a4fd
SHA1 03e44cf38696bf16c3c765438c2e6cf320d99e30
SHA512 39d7aadc9e8ca06e1707b7662a569f8c11cf34357a3f62f50b53b279e296bb20bed9c264e690b66f5c2b95cca794ed7996160d55c670f63cbf11e600b9ab466c
SSDEEP 6144:9XF4lr02ZYuMwVpwck8MrWlwzpE3EUxgDRuEh:r4Fv52ck8YzSGD9
TLSH
T1C624236AE5370419C712DDA236B3DBA94CA154BB1CB1BCB67AAC315C36B234153C2E7C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  Ultimate Windows Tweaker 4.8/ButtonExtended.dll
- Size 26KB
- SHA256 11692a5c5001628e294ae9e1146abd4b4470e81f21883f80a7af7fe6d197d44b
- MD5 d45cab94cfb2d3dd1b7bbad86090e896
- SHA1 a8eb8c70141e916ee085ee79dbebd811b820bc17
- SHA512 44fc290d19e10b1e0b484a266f8cce8983b015211db309c24aebac0d2493d62edc388366f5353e838f4ec3cd1f787b3265b94788d817f041c165913e6c44ba8a
- SSDEEP 384:FFp63O43T4fCrrbM0a8XzgiNXbt7ml+v0oty:FFp2YCrrbZXPb/y
- TLSH
  T1BDC2EA2312CFBEE6C8B90671777353C1C32DDE055903EA2E4AD0756A997E2433A923D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Ultimate Windows Tweaker 4.8/UWT Homepage.url
- Size 94B
- SHA256 9c49f370899cdc0f7da299bf038aa374d4d4dfdb1e5ebbb2325e086bc893865d
- MD5 2d98d02e794606f540235133d238fdfa
- SHA1 910cd2ebdaf9873cb62c7b9440890f9b201f2744
- SHA512 e0486a842f0cc6e8a8b093fe8a428df61eece442e24287abfd7fe9db793086ac200d606858d3c6e655add15f41629cfe37ed34dffe7373ccbae8c5fff7671356
- TLSH
  T15CB012434405C08888310C0CD2BFF3069E0254C0D002D1BC5060CB043C46027C9CE294
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral3 behavioral4
- Target
  Ultimate Windows Tweaker 4.8/Ultimate Windows Tweaker 4.8.exe
- Size 660KB
- SHA256 b25b8e40616136045f021a9ac1e2143b3460caed08c01606820ca4fa4107e5f2
- MD5 dfd18eabcfa63ce63fdbebe4673e99c8
- SHA1 e325611de3de808046018993338eca3c2ff09f0a
- SHA512 0b67457095f0d7821e0c21f358c940af1ac6db2bdf7051b6c859a52423ff4c6f642cc614b7ef580894fa480d616bf173e3870907040180cf2a627d6875c80a83
- SSDEEP 12288:3XlA18pVM/xw4alNt5ndTJWu4ugmp4AdcK99Pw:3XlAKz9vndTWAKI4
- TLSH
  T1BAE4C66513F4252EF9F6AB30A676017448F5BD9B2973DD6C0DE121AC1170B81CEB3B2A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

adware defense_evasion ransomware spyware trojan
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Checks whether UAC is enabled
  defense_evasion trojan
- ConfuserEx .NET packer
  Detects ConfuserEx .NET packer.
behavioral5 behavioral6

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

3

T1112

Credential Access

Discovery

Query Registry

2

T1012

System Information Discovery

4

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Checks computer location settings

Checks whether UAC is enabled

ConfuserEx .NET packer

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6