49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420

Sharing

Copy URL Twitter E-mail

General

Target
SetupImgBurn_2.5.8.0.exe
Size 3.0MB
Sample260908-3d482syxbt
SHA256 49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420
MD5 4bf2b8f4b46385bfda4d65e423cfb868
SHA1 6a3d20796e1fcd4169d5d339af6e491dcea3367c
SHA512 18f12d78316da2210a7cf0506c6f2e6d1634800697e5bd60bd402597f5cc590f96f97e42878caafae3f3bc12807b715a64aa6a81f8b5ece6343cebd2a4066375
SSDEEP 49152:2ufgi/X54lqSE7QSmNk/dX1kB+0WIQbIu7OMK0Efs+0KlCSPvUYttV4PrmVDOl8f:2cXn7vmih1kB+lF57EsDKwS5ttV4Prkj
TLSH
T1ECE533B23462E85BE6930C7B22C227F3C169BB41E5E785BF4345FD2B11D0275C67162A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  SetupImgBurn_2.5.8.0.exe
- Size 3.0MB
- SHA256 49aa06eaffe431f05687109fee25f66781abbe1108f3f8ca78c79bdec8753420
- MD5 4bf2b8f4b46385bfda4d65e423cfb868
- SHA1 6a3d20796e1fcd4169d5d339af6e491dcea3367c
- SHA512 18f12d78316da2210a7cf0506c6f2e6d1634800697e5bd60bd402597f5cc590f96f97e42878caafae3f3bc12807b715a64aa6a81f8b5ece6343cebd2a4066375
- SSDEEP 49152:2ufgi/X54lqSE7QSmNk/dX1kB+0WIQbIu7OMK0Efs+0KlCSPvUYttV4PrmVDOl8f:2cXn7vmih1kB+lF57EsDKwS5ttV4Prkj
- TLSH
  T1ECE533B23462E85BE6930C7B22C227F3C169BB41E5E785BF4345FD2B11D0275C67162A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery upx
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1
- Target
  $PLUGINSDIR/FindProcDLL.dll
- Size 3KB
- SHA256 0fa04f06a6de18d316832086891e9c23ae606d7784d5d5676385839b21ca2758
- MD5 8614c450637267afacad1645e23ba24a
- SHA1 e7b7b09b5bbc13e910aa36316d9cc5fc5d4dcdc2
- SHA512 af46cd679097584ff9a1d894a729b6397f4b3af17dff3e6f07bef257bc7e48ffa341d82daf298616cd5df1450fc5ab7435cacb70f27302b6db193f01a9f8391b
- TLSH
  T1AE717387378506B7D08006303089BCAA3B9E9A350F5B59BFD6DBA99F7C641F4E134706
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral2
- Target
  $PLUGINSDIR/InstallOptions.dll
- Size 14KB
- SHA256 8f24c6cf0b06d18f3c07e7bfca4e92afce71834663746cfaa9ddf52a25d5c586
- MD5 d753362649aecd60ff434adf171a4e7f
- SHA1 3b752ad064e06e21822c8958ae22e9a6bb8cf3d0
- SHA512 41bf41add275867553fa3bd8835cd7e2a2a362a2d5670ccbfad23700448bad9fe0f577fb6ee9d4eb81dfc10d463b325b8a873fe5912eb580936d4ad96587aa6d
- SSDEEP 192:3Gs+dH4+oQOTgDbzuNfrigyULWsXXZF/01JJijnK72dwF7dBEnbok:3GvdH4qMebzPY2Vijn+BEnbo
- TLSH
  T1F0623B51638888F3DBD6013EB4523707AB595126B4925DE2CB271FCA6D3B18E3EB2346
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3
- Target
  $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 bedcdb63f027107c471fe244554c3038fb4caf9f96f7eab2d430f76f2f4f768b
- MD5 a3f1e5d94d8e07121bad59af16ef358a
- SHA1 9223fa516807ec103e5381ce8b2b7295a846a89f
- SHA512 6b466ff8dd9855048dcdd3b21760bd0cce77b1aed561d8cf2099089b97910f8d2da86970a2023c59e1807a45138cc25fcb899f9df67845bdf22a44ec7b491050
- SSDEEP 96:riqPXbjaKyFU40KhveE+6nrh9MXEiGDdoDxUxOLqtJ1taRhElfRx2:riqPXaKy1k4h9kvDxUxj/tWgfRx2
- TLSH
  T117F1E8BEF7C009F2CA4B56302C176B078F56A631432561B39A6356CA75C15F3ED25712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral4
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5
- Target
  ImgBurn.exe
- Size 2.6MB
- SHA256 02c74678128a9dfef58eab5abe269382c6b4862440c26c22cde7b83868f478f1
- MD5 4776c25e4ffda40783df8d31217ed085
- SHA1 8dfeb7da315ee2f5ccc59b1cbfd9e60b74f17fc3
- SHA512 8ef9677f52a5fcfb0da7c34defc03a2c449962dabe468c57a3c4bf9cd7a21997e348252ace05da5a60e809b2305fa320c95f79376cc75feae83b698e60744bac
- SSDEEP 49152:mjFpUHdWtSyTHF9FilJ/i1Lh8sqBrpGEXtx3VIL+zqXlnsvzXi08GzFt:BHdFojiuLusqBdGutxVuXOU
- TLSH
  T13FD53390CBE53916DA4D7DB0492AD92037D37E194A024D3F6B98B80F7D32783227B65E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral6
- Target
  ImgBurnPreview.exe
- Size 209KB
- SHA256 363f61889adaf3ee4bb95bda5f6d7cb1d7c906b61c310c8e98ad02717c5203f9
- MD5 ad46f2b6d9bbd7c271e6b67df3a00695
- SHA1 a929f7c87f659253c25cbf786a81180a4dca0e3d
- SHA512 af72e7d61cbcef34258ec819041dbc7747862070882c8390df939a6483fbcfa0d1635be16cb5720dc74f551f8ec426da1c5157fe65664b592c70fc893de59ab6
- SSDEEP 3072:Em1BzKL2lZ33qxjrzVcol6gUjywWHlGvakyvVuk2AQ4w/vvoutc:LLzL33qxjWoG19xCuzAQn/XoS
- TLSH
  T1A62412A647E21B4EE69504374DB7FA0A5628BD3165290FEF20D4302FDD72261EA0F52F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7
- Target
  uninstall.exe
- Size 72KB
- SHA256 1b5cb8035b18d06b5219f2e7d30200ca343c0ce6763962c7c41534aecc2b1c80
- MD5 eff839d29dbb06677a85117d036e29c6
- SHA1 473823c718f3db95d27f14b783e68c08f13caded
- SHA512 cb4fb2b054e3430df934cd30be220e13c2f86bf2dbc6e2a46d59fa4f7d9c6feca9cbc44fb1cc49bfae7aa39623d26d8f4510fa9a0584a1f64110cae87117aff3
- SSDEEP 1536:oRPYqa5pic6jXFdL2KiMcH8gg+SsN7buCryG4DelpkF1LSQHYc:MPA6jXFN2McH8b+vnuCryGmjGS
- TLSH
  T16773CF1632D0C4FBD55B06708DBBC7B9D7B3B6B40116929B27906F6F6C712C2CE1229A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery installer
- Deletes itself
- Executes dropped EXE
- Loads dropped DLL
behavioral8
- Target
  $PLUGINSDIR/System.dll
- Size 10KB
- SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
- MD5 56a321bd011112ec5d8a32b2f6fd3231
- SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
- SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
- SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
- TLSH
  T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Enumerates connected drives

Drops file in System32 directory

UPX packed file

UPX packed file

UPX packed file

Deletes itself

Executes dropped EXE

Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9