General
- Target earnapp-setup-1.627.783.exe
- Size 15.1MB
- Sample261001-vbw6nagf28
- SHA256 e604156d0cc4daa4d95bb064ed2f9d3e71f453f2475a8869ab5f2085e2174697
Score
8/10
Malware Config
Targets
-
- Target earnapp-setup-1.627.783.exe
- Size 15.1MB
- SHA256 e604156d0cc4daa4d95bb064ed2f9d3e71f453f2475a8869ab5f2085e2174697
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory
-
- Target $PLUGINSDIR/LangDLL.dll
- Size 5KB
- SHA256 18e8b40ba22c7a1687bd16e8d585380bc2773fff5002d7d67e9485fcc0c51026
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
Score3/10 -
- Target $PLUGINSDIR/UserInfo.dll
- Size 4KB
- SHA256 e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0
Score3/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2
Score3/10 -
- Target $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 1076ca39c449ed1a968021b76ef31f22a5692dfafeea29460e8d970a63c59906
Score3/10 -
- Target earnapp.exe
- Size 19.5MB
- SHA256 601488aea4e7fe6da0071fe88b3a2ceae209e1ba8acbc9ea392a3f8977e61066
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target lum_sdk32.dll
- Size 7.4MB
- SHA256 ab9a747ba8048f711e717760beba0212e7618247d2a6f0f3eb50d4910284f11c
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
- Target net_updater32.exe
- Size 9.9MB
- SHA256 48173c32632b54089fd85c2a8b4e6b23658ba3d3770ad4ff8a95078b4781c58c
Score3/10
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
2Subvert Trust Controls
1Install Root Certificate
1Discovery
Browser Information Discovery
1Peripheral Device Discovery
1Query Registry
4System Information Discovery
4System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
2Internet Connection Discovery
1System Time Discovery
1