General

  • Target
    Aervyx-Setup.exe
  • Size 77.9MB
  • Sample260913-e1epxatwds
  • SHA256 ab68c4810b09ddc13beead1e6925eb7c3f3be21e211616abbb849eb90a4eb09d
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Aervyx-Setup.exe
    • Size 77.9MB
    • SHA256 ab68c4810b09ddc13beead1e6925eb7c3f3be21e211616abbb849eb90a4eb09d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

    • Target
      $PLUGINSDIR/StdUtils.dll
    • Size 100KB
    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/UAC.dll
    • Size 14KB
    • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/WinShell.dll
    • Size 3KB
    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/app-64.7z
    • Size 77.3MB
    • SHA256 72911634e29a59c596190575562d3bf340b62613c7167269c3a517836206f63f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      LICENSE.electron.txt
    • Size 1KB
    • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      chrome_100_percent.pak
    • Size 148KB
    • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      chrome_200_percent.pak
    • Size 223KB
    • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      icudtl.dat
    • Size 10.0MB
    • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/af.pak
    • Size 494KB
    • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/am.pak
    • Size 800KB
    • SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/ar.pak
    • Size 874KB
    • SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/bg.pak
    • Size 913KB
    • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/bn.pak
    • Size 1.1MB
    • SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      locales/ca.pak
    • Size 556KB
    • SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks

static1

Score
3/10

behavioral1

discoveryexecution
Score
7/10

behavioral2

discovery
Score
7/10

behavioral3

discovery
Score
3/10

behavioral4

discovery
Score
3/10

behavioral5

discovery
Score
3/10

behavioral6

discovery
Score
3/10

behavioral7

discovery
Score
3/10

behavioral8

discovery
Score
3/10

behavioral9

discovery
Score
3/10

behavioral10

discovery
Score
3/10

behavioral11

Score
1/10

behavioral12

Score
1/10

behavioral13

ransomware
Score
1/10

behavioral14

ransomware
Score
1/10

behavioral15

execution
Score
3/10

behavioral16

execution
Score
3/10

behavioral17

execution
Score
3/10

behavioral18

execution
Score
3/10

behavioral19

execution
Score
3/10

behavioral20

execution
Score
3/10

behavioral21

execution
Score
3/10

behavioral22

execution
Score
3/10

behavioral23

execution
Score
3/10

behavioral24

execution
Score
3/10

behavioral25

execution
Score
3/10

behavioral26

execution
Score
3/10

behavioral27

execution
Score
3/10

behavioral28

execution
Score
3/10

behavioral29

execution
Score
3/10

behavioral30

execution
Score
3/10

behavioral31

execution
Score
3/10

behavioral32

execution
Score
3/10