General
-
Target
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a
-
Size
430KB
-
Sample
210504-tzevmffne2
-
MD5
5bd3785acf30645fad9cd02932ef8e33
-
SHA1
ef7aed5a6d578c973a8f3ffbfecfc67ff1542218
-
SHA256
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a
-
SHA512
5fd6a10ca615f4ee5eb2d7b3874d65398890972f65582e0a94dc5d483119a5aa4ab5b611535064c542695d3791e1c58a839fc87cc7c916d5f35685a1f1bf2622
Static task
static1
Behavioral task
behavioral1
Sample
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a.exe
Resource
win10v20210410
Malware Config
Targets
-
-
Target
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a
-
Size
430KB
-
MD5
5bd3785acf30645fad9cd02932ef8e33
-
SHA1
ef7aed5a6d578c973a8f3ffbfecfc67ff1542218
-
SHA256
ad3662b3d454f5e261eaca1f654f2dd0a7b9bdb80ad1037b9a83ae15a23f6d9a
-
SHA512
5fd6a10ca615f4ee5eb2d7b3874d65398890972f65582e0a94dc5d483119a5aa4ab5b611535064c542695d3791e1c58a839fc87cc7c916d5f35685a1f1bf2622
Score10/10-
Drops startup file
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon
-
Drops file in System32 directory
-