8943845c5c7483bd1f2ef017064ca69bc619e88708e6e1651654c395a0311c22

General

Target
Instalador.zip
Size 150KB
Sample260907-ak48eas1fz
SHA256 8943845c5c7483bd1f2ef017064ca69bc619e88708e6e1651654c395a0311c22
MD5 8e734f4747346e1d3a080a811b8beac6
SHA1 38e054ee5c8952cacfa80125ec855f0b30f2bca6
SHA512 3b61a53a0cee2064934dce8c929d8a7f14b89fe0563c68762b77663e4c7bd5b1c5b5936abccb1764a241dddd1e597159915a47d6d5aae42a61dc4f2399617460
SSDEEP 3072:VSY+eMZsAojrmz5GLY+HC8W0kdaWZiME2ERB2xDSG8G3LS8NbQckdYH:sxeMZsAmd9HmDHAT2xGGV327C
TLSH
T1FEE3138CAC118859A949D3C1A4B78112FF9F2C87FD8E9A811FCD1DD9DB5280EF61D8B1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Instalador.exe
- Size 175KB
- SHA256 955cc24df2229776e872312122702008981d83471b5e389315aa10304b808cf3
- MD5 1d6c00381a5d4df4b825c0816cf3a6c5
- SHA1 d6e0a8bac803ee1c92ee7dbdf8dbd9d5ed53ac8b
- SHA512 ceab51f216388a47204e83def47ce2c3543ec18be767ddb44ca1f873ca090c4cceda7abe2970b4c18c9206160f3bbf87d75d69c8f59b78974294409c50640a2a
- SSDEEP 3072:SOqXtuKuajptxtSBzQWJWl0W0kdYqr1lcFYM5wQK7chFRlbmtuKuajptxtSBzQWk:S9XtEQvtS1QVTDFr1lgbbmtEQvtS1QVp
- TLSH
  T10004C0346196954FE43A37F51630E3908654BEC1346BDADE3ED0248FBD06391AA36EF2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

defense_evasion discovery trojan
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Network Share Discovery
  Attempt to gather information on host network.
  discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

Query Registry

System Information Discovery

4

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Checks computer location settings

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Network Share Discovery

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2