General
- Target Scritchy-Scratchy-SteamRIP.com.rar
- Size 211.0MB
- Sample260910-sdwlssyygv
- SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
- MD5 245c42b2dbba75f55929149b3915c241
- SHA1 087d08bc45202b0767aa63dd61600a6ad605f3c2
- SHA512 8a80ecf8fbf099cb01cf81090fd42254608815f6f593d97d6a93f74093ad2da6dce767605d85abe9c82f4769398c69bb62af2eda22eed8eed98b2788174ccb2b
- SSDEEP 6291456:9SUZaOvzp69ORyveRxvW0BvuIXpmIgCxBrSXgRJQ3sZ9V9LOhIw:9RD09ORqcx+0ZRXpmIgC/66QYLOj
- TLSH T13EB833F1CB81AE97D2D7413539254F6FF3E680E184E7026BD8131E053E76AA583BA943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Scritchy-Scratchy-SteamRIP.com.rar
Resource
win11ltsc2024-20260709-en
31 signatures
900 seconds
Malware Config
Targets
-
- Target Scritchy-Scratchy-SteamRIP.com.rar
- Size 211.0MB
- SHA256 fd358eacff1fb7abd4b3265d4226ccf994b1bac62fba6454d6f787b17f9b057c
- MD5 245c42b2dbba75f55929149b3915c241
- SHA1 087d08bc45202b0767aa63dd61600a6ad605f3c2
- SHA512 8a80ecf8fbf099cb01cf81090fd42254608815f6f593d97d6a93f74093ad2da6dce767605d85abe9c82f4769398c69bb62af2eda22eed8eed98b2788174ccb2b
- SSDEEP 6291456:9SUZaOvzp69ORyveRxvW0BvuIXpmIgCxBrSXgRJQ3sZ9V9LOhIw:9RD09ORqcx+0ZRXpmIgC/66QYLOj
- TLSH T13EB833F1CB81AE97D2D7413539254F6FF3E680E184E7026BD8131E053E76AA583BA943
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-
Executes a VBScript file via the Windows Script Host.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
2Visual Basic
1Windows Command Shell
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1