General

  • Target
    sylteditor-1.1.5108.exe
  • Size 752KB
  • Sample260928-3e33dawbph
  • SHA256 015ef96b7c7adbdebf5acdd0e164cbf56f1d4861c1f15f189d43576d909ccd13
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      sylteditor-1.1.5108.exe
    • Size 752KB
    • SHA256 015ef96b7c7adbdebf5acdd0e164cbf56f1d4861c1f15f189d43576d909ccd13
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      $PLUGINSDIR/InstallOptions.dll
    • Size 14KB
    • SHA256 c9cd5c9609e70005926ae5171726a4142ffbcccc771d307efcd195dafc1e6b4b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/System.dll
    • Size 11KB
    • SHA256 dc58d8ad81cacb0c1ed72e33bff8f23ea40b5252b5bb55d393a0903e6819ae2f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      SYLTEditor.exe
    • Size 1.7MB
    • SHA256 c43c097ec0f5a259d9991e6c87cec0441e3dc9c20be31fa7ee3612b79a926546
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      sylteditor.pdf
    • Size 134KB
    • SHA256 618198d4dee8bafb738ab4efe585f1886085f36d29f35d3b78c962bb980ee390
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Target
      syltexport.exe
    • Size 45KB
    • SHA256 b4649f9b03f45b04276b645743843d970ebe208bc0feeb5fefe082dc5d3ffc54
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      syltimport.exe
    • Size 45KB
    • SHA256 ae3a24c830868704ce3a31382498a28be7a0b657b6515460f35da6478c689d8d
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      uninstall.exe
    • Size 38KB
    • SHA256 26e781c48bdae3034da956aa56171c5066f6b2e9b03490545a15ba6f3a259d24
    • MD5 SHA1 SHA512 SSDEEP TLSH

MITRE ATT&CK Enterprise v16

Tasks