General
-
Target
script_hack_412.exe
-
Size
2.8MB
-
Sample
211024-xxbsysfaa5
-
MD5
50adb4f170fecb0245d4e637fe0c728b
-
SHA1
f5c347f53a6819e0835ab29aada5aa3b6e69a350
-
SHA256
8f95ed5d52f2bf5133ab36c14cfaf31a81e676f260f6103596595ab99bae95e3
-
SHA512
c0847924da0285a23444deccd7399c183528667c4bf0c1951c0d12d92cdf157169d7804002a013d6c1492e83b86bb0042756040680bc654f79f9197fe16db0a3
Static task
static1
Behavioral task
behavioral1
Sample
script_hack_412.exe
Resource
win7-en-20210920
Behavioral task
behavioral2
Sample
script_hack_412.exe
Resource
win10-en-20210920
Malware Config
Targets
-
-
Target
script_hack_412.exe
-
Size
2.8MB
-
MD5
50adb4f170fecb0245d4e637fe0c728b
-
SHA1
f5c347f53a6819e0835ab29aada5aa3b6e69a350
-
SHA256
8f95ed5d52f2bf5133ab36c14cfaf31a81e676f260f6103596595ab99bae95e3
-
SHA512
c0847924da0285a23444deccd7399c183528667c4bf0c1951c0d12d92cdf157169d7804002a013d6c1492e83b86bb0042756040680bc654f79f9197fe16db0a3
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.
-