General

  • Target

    3b7edc6b378860d916e7889ba553d1fd467c905672893a0fd51357cd1a1f2b8a

  • Size

    304KB

  • Sample

    220201-mlc7jachgm

  • MD5

    03548d46adf65abe05b9da64b08b8258

  • SHA1

    851319fd8d8a50f6c0c205a58314853ef9d52529

  • SHA256

    3b7edc6b378860d916e7889ba553d1fd467c905672893a0fd51357cd1a1f2b8a

  • SHA512

    f74701533a6a931640d8cd5ca983356ca32351a88dbf283308c9baefad5cd333060ae5a1acaa4071a2de368465795bbb453326b75ac91fb3fa3e7b3f7e5c55d4

Malware Config

Targets

    • Target

      3b7edc6b378860d916e7889ba553d1fd467c905672893a0fd51357cd1a1f2b8a

    • Size

      304KB

    • MD5

      03548d46adf65abe05b9da64b08b8258

    • SHA1

      851319fd8d8a50f6c0c205a58314853ef9d52529

    • SHA256

      3b7edc6b378860d916e7889ba553d1fd467c905672893a0fd51357cd1a1f2b8a

    • SHA512

      f74701533a6a931640d8cd5ca983356ca32351a88dbf283308c9baefad5cd333060ae5a1acaa4071a2de368465795bbb453326b75ac91fb3fa3e7b3f7e5c55d4

    • Valak

      Valak is a JavaScript loader, a link in a chain of distribution of other malware families.

    • Valak JavaScript Loader

    • Blocklisted process makes network request

    • Sets service image path in registry

MITRE ATT&CK Enterprise v6

Tasks