f44425ca775430ebac62b7e83a93cead84b7fd9dc06c922a20f20c4f588c4c5b

Sharing

Copy URL Twitter E-mail

General

Target
Froststrap-Setup.exe
Size 17.0MB
Sample260906-zb6sbasdjg
SHA256 f44425ca775430ebac62b7e83a93cead84b7fd9dc06c922a20f20c4f588c4c5b
MD5 1b0e62c9afea15bc116bf7c4615eefdc
SHA1 5bd57a5c6d6399fe15e4917082be13fa2750e7da
SHA512 d6878615992144994bd9ea9bb1a0b634e335d7ffbe8bdfc40f2e2316a922d623648d83cbb6591bfcebcc5c3396035b82003233cc7ae35fc647cfc4ab082e5cb7
SSDEEP 393216:CHMQgprSy24DqSUG+k7TMWj/MEHcpnQiggZk1mGHZinCLp+WZUeC7td/HjMx:CsOL+pak7TMWFHcpnQRg6kuZinZWZTMS
TLSH
T10107338DFA825964DA11CFBCA75BB52299091F01CFE48E0B4732BF4528F9718523B3D6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Froststrap-Setup.exe
- Size 17.0MB
- SHA256 f44425ca775430ebac62b7e83a93cead84b7fd9dc06c922a20f20c4f588c4c5b
- MD5 1b0e62c9afea15bc116bf7c4615eefdc
- SHA1 5bd57a5c6d6399fe15e4917082be13fa2750e7da
- SHA512 d6878615992144994bd9ea9bb1a0b634e335d7ffbe8bdfc40f2e2316a922d623648d83cbb6591bfcebcc5c3396035b82003233cc7ae35fc647cfc4ab082e5cb7
- SSDEEP 393216:CHMQgprSy24DqSUG+k7TMWj/MEHcpnQiggZk1mGHZinCLp+WZUeC7td/HjMx:CsOL+pak7TMWFHcpnQRg6kuZinZWZTMS
- TLSH
  T10107338DFA825964DA11CFBCA75BB52299091F01CFE48E0B4732BF4528F9718523B3D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 28KB
- SHA256 34da723ffa683311cdbc98fafdf963f8793f681d02a47c1419a1f1584a416dcb
- MD5 c9dd2491b3cbeb7fee4723ebef1d81d8
- SHA1 4c534568a7a1734282eb62ce09ded92afea1836d
- SHA512 a0fbec4a01646f10ff7ed8078401097f30f6a342ff14a5eab28016612980eb8a563e3b59ee35fefbea2613e13a33f7410e5685036ceae63121a0d5685b01ba7b
- SSDEEP 768:PEkXzxSnoTw4+8F4p6doUbt9qCCCCCCCCjT9:DXzKoTw49I6d
- TLSH
  T157D21E1CF91284F5D433A2B5C0DBD63BD9249A1985611D17FE7B0E5CBF672909E2E302
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsDialogs.dll
- Size 14KB
- SHA256 2222fe1337f1bea92bd0859cb5fa19e838e0c08ba3346147cd881956bbbbfe50
- MD5 e39cb978003fb67f11cf710fb6fc2088
- SHA1 bcb131591fefac731621785b209d9cf43579a3c6
- SHA512 564f00cb20c23adeecc607e00be20c488d037108fd1cb666e1d31f2cf0f2bd044c7acc566452043e3d7483d3402404c850a78afc24742a7eec760916511745f0
- SSDEEP 384:+0dUl5kStC//1RRhUhiIklcCCCC7uv417:+cUXalRRkzCCCC7uvm
- TLSH
  T1C262B50DBE1189F5E571D23081DBEB3FC1A8556BD55F0E0AFF760A0C7857271A92EA02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  Froststrap.exe
- Size 66.0MB
- SHA256 1fe2352309034a16b7dd9818358f65c5fac39eeb9faa49e09e382bfbb216d8ab
- MD5 f316c480b94a4302069cda0189bb5281
- SHA1 4a1e73a7e83db02482103036782ca3c68213e45c
- SHA512 48c22b4a399cf4cfb0eb9f7b4374451fff79a0b216660805bc9428b4c37f0d0e4645686d43771f43bfc8d114dbc9233a291a2cf22d498edc1455c4421afbaae5
- SSDEEP 393216:TQs/B8kIsR4LOjyoc8QYLeA59Bw5lQN5AGUipol1DVjgjQZCM:79e+NbVfBwrQ7pfsZCM
- TLSH
  T144E77E0973D88A69C47B933892A3400656B0BD16D711EFCF358C75AE1FB2B805E77B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8