3b9223e571c4724e8ccf42c3c72df15a83c5ca6936ae88cff8b2286dac466836

Sharing

Copy URL Twitter E-mail

General

Target
Latitude-Engine-Setup-1.17.0.exe
Size 299KB
Sample261107-25pr1awsbs
SHA256 3b9223e571c4724e8ccf42c3c72df15a83c5ca6936ae88cff8b2286dac466836
MD5 18b00f15e67e61c8cbb22bb5f801f60a
SHA1 13d0a3994116a417d6c291566668c4bdf6de44af
SHA512 066fd5eda2603873e5ef53140a304a7b8ac8dfc35ced65ce28ad688f18157f1ba7e92335148bb958f475e9f6fdf3a3c5dc411c579189b4d2e8a00df58c235f5d
SSDEEP 6144:tlnhrwtzVYR0ZJvywE0AlJualTfiYTM0tsfg8C5GrwqdRGl:tln2VYyZJb7cY0tv8C5Grwuq
TLSH
T15964128063E1C8A3EA534F76DEF2A687BD3AD6210894270F335093D87D42781ED1DBA5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

discovery execution

Malware Config

Targets

- Target
  Latitude-Engine-Setup-1.17.0.exe
- Size 299KB
- SHA256 3b9223e571c4724e8ccf42c3c72df15a83c5ca6936ae88cff8b2286dac466836
- MD5 18b00f15e67e61c8cbb22bb5f801f60a
- SHA1 13d0a3994116a417d6c291566668c4bdf6de44af
- SHA512 066fd5eda2603873e5ef53140a304a7b8ac8dfc35ced65ce28ad688f18157f1ba7e92335148bb958f475e9f6fdf3a3c5dc411c579189b4d2e8a00df58c235f5d
- SSDEEP 6144:tlnhrwtzVYR0ZJvywE0AlJualTfiYTM0tsfg8C5GrwqdRGl:tln2VYyZJb7cY0tv8C5Grwuq
- TLSH
  T15964128063E1C8A3EA534F76DEF2A687BD3AD6210894270F335093D87D42781ED1DBA5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

discovery execution
- Discovers running processes
  Running process information can be used to identify security tools or plan follow-on actions.
  discovery
behavioral1 behavioral2
- Target
  $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
- MD5 564e01f2c6edfb8475573e1b809cb5eb
- SHA1 5d767e8f685449d86cd8d16c83a814ef8f7d6264
- SHA512 67486f8e996b29688cfb5a57ae4a7604fa0892ba0eeccdd55f514ca4bd9b79a6fe42bfab4fc85156c2258ae66539bdd9bb36a8b5f7f944f3007c2421f244c95c
- SSDEEP 192:rjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ80QPi:X/Qlt7wiij/lMRv/9V4b8r
- TLSH
  T1FD426C1297B089F2F551493419667F2A6FBEAC5D27F405A3CFE304C63D212DB9879243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  $PLUGINSDIR/nsExec.dll
- Size 7KB
- SHA256 1dee37f6abb2dec9e767bd022d29386b6b295bbd55bf316d2649b8d298f89e9d
- MD5 879b0aab93b11228a27d6b2e498b95be
- SHA1 f5024d0d44c37443d7c17f1ff80fba301389ed42
- SHA512 427ddc4c01be77dd28a376a78714f5004edbee2df6662500cf11d2f4309fdf9a126d7632a7afd0e28712e851eabf56d9d469eb2f3b6c645923d3476275d6eff6
- SSDEEP 192:JZFon9Dar9s7hdD8oZc41Zf0NQZGdH6E:RonlarK3orqf0NQZGdH
- TLSH
  T1FFE1E93571C02DF3D08A4A717D26B92B83F89826277741708B771AD979E0AE7FD24742
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral5 behavioral6
- Target
  PCAPColorEngine.aex
- Size 1.3MB
- SHA256 b44a300b2d042bb9e3ba1bfaef0e6ea6998b08d15eb062b3b7f1397e6bcf2076
- MD5 64490c0c6e6343cc3127cbd76611a16f
- SHA1 439df9e1398ca0a95d7bf9236ea7861b09c4a616
- SHA512 86e975cd8fd2fe74b039f0d1b86f20596cceefcd19f1b92daaabcfad2377805216fa6866afe3512e2a25719e4b535701b4e75dd75af21816e59e767d59740754
- SSDEEP 12288:l0vQRXuni6mq5Cl3GxWFhl9uiWb3sfFhg:l0vQROWFcim3stG
- TLSH
  T17255D648F255C9D3C7495B71800BDF99E42CE99BC32055C72A9C29AE3DE33F81CB9992
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Windows Command Shell

T1059.003

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Discovers running processes

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8