Overview

overview

10

Static

static

37931bf2e8...12.dll

windows7_x64

10

37931bf2e8...12.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    37931bf2e8518794aaafc7c29903efa029e09674648c5d5930607cb4c1a9b512

  • Size

    304KB

  • Sample

    220201-mmbebschhp

  • MD5

    0efc35ec0073e056080b9532d64efc4e

  • SHA1

    b6c26d041175a2befb5f5f7047388d01b39af5ec

  • SHA256

    37931bf2e8518794aaafc7c29903efa029e09674648c5d5930607cb4c1a9b512

  • SHA512

    0a02b581f2f595b2aa4891f0196091b707aa8a15cbf820f2c04fab7ac9dac78f5a3197f66622b56a1c22caeaf562f5116b69f7aac0c8c70ac81f11af71ba2697

Score
10/10
valakLoaderpersistence

Malware Config

Targets

    • Target

      37931bf2e8518794aaafc7c29903efa029e09674648c5d5930607cb4c1a9b512

    • Size

      304KB

    • MD5

      0efc35ec0073e056080b9532d64efc4e

    • SHA1

      b6c26d041175a2befb5f5f7047388d01b39af5ec

    • SHA256

      37931bf2e8518794aaafc7c29903efa029e09674648c5d5930607cb4c1a9b512

    • SHA512

      0a02b581f2f595b2aa4891f0196091b707aa8a15cbf820f2c04fab7ac9dac78f5a3197f66622b56a1c22caeaf562f5116b69f7aac0c8c70ac81f11af71ba2697

    Score
    10/10
    valakLoaderpersistence

    • Valak

      Valak is a JavaScript loader, a link in a chain of distribution of other malware families.

      Loadervalak

    • Valak JavaScript Loader

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks