Overview

overview

8

Static

static

5

installer.zip

windows10-2004-x64

1

installer.zip

windows11-ltsc_2024-x64

1

assets

windows10-2004-x64

3

assets

windows11-ltsc_2024-x64

3

cfg

windows10-2004-x64

3

cfg

windows11-ltsc_2024-x64

3

data.pak

windows10-2004-x64

3

data.pak

windows11-ltsc_2024-x64

3

gup.xml

windows10-2004-x64

3

gup.xml

windows11-ltsc_2024-x64

1

install.exe

windows10-2004-x64

8

install.exe

windows11-ltsc_2024-x64

8

libcurl.dll

windows10-2004-x64

8

libcurl.dll

windows11-ltsc_2024-x64

8

machine.xml

windows10-2004-x64

3

machine.xml

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    installer.zip
  • Size 43.5MB
  • Sample261107-thbb4aztew
  • SHA256 979023ba8eb82396282eaa7aa2a27802d5441f137769c33a3e2abf27b5ad77bd
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryexecutionspyware

Malware Config

Targets

    • Target
      installer.zip
    • Size 43.5MB
    • SHA256 979023ba8eb82396282eaa7aa2a27802d5441f137769c33a3e2abf27b5ad77bd
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      assets
    • Size 45.9MB
    • SHA256 72d36ff048e233a910b7be8f2965056381e674313d22ef71ec30a1d7624d25bb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      cfg
    • Size 20.2MB
    • SHA256 fbe49af9b8c690ae9e6c5368b32ab5fdf1738f802a003594ba64a1d6d95bdbb8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      data.pak
    • Size 183.4MB
    • SHA256 4a5402653c0b0dc428a2f8221e4d9876addcc2a19a5cf900d8a4d5ef709054fe
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    execution
    behavioral7behavioral8
    • Target
      gup.xml
    • Size 4KB
    • SHA256 92717951aae89e960b142cef3d273f104051896a3d527a78ca4a88c22b5216a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral10behavioral9
    • Target
      install.exe
    • Size 785KB
    • SHA256 eaac64c113ebaba1fae924ad1b6239a44c8806bf2b85d8dc11a27ad65a981cc1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution
    behavioral11behavioral12
    • Target
      libcurl.dll
    • Size 4.2MB
    • SHA256 a0f3c5e238704a9607296a93526a0a27f5732db3dc51b02e1baa83e8c5dc7875
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    execution

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

      execution

    • Executes dropped EXE

    behavioral13behavioral14
    • Target
      machine.config
    • Size 33KB
    • SHA256 ef9b9387168fd1dd6c996f96c134d9c44f8eb06f9587004bf997252a520182d6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    adwarediscoveryspyware
    behavioral15behavioral16

MITRE ATT&CK Enterprise v16

Tasks