Overview

overview

10

Static

static

304b63a436...94.dll

windows7_x64

10

304b63a436...94.dll

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    304b63a4364fd1a92dce9fe0fd15a299ff5fd01ab4a2185dab446486ffe22694

  • Size

    242KB

  • Sample

    220201-mpf3ladadl

  • MD5

    69937b0f8c5f19070132f1a63427414a

  • SHA1

    61bb61cce8bc6e7789bbf5021b4326b41fc8d0e5

  • SHA256

    304b63a4364fd1a92dce9fe0fd15a299ff5fd01ab4a2185dab446486ffe22694

  • SHA512

    9a71a0838321d4b9aadb28823a4d255e2d9959f0bab29abdd382982a0e3ec068a31ad73754f62decbc30b89c53755ed438249428a086541899b51b214969d519

Score
10/10
valakLoaderpersistence

Malware Config

Targets

    • Target

      304b63a4364fd1a92dce9fe0fd15a299ff5fd01ab4a2185dab446486ffe22694

    • Size

      242KB

    • MD5

      69937b0f8c5f19070132f1a63427414a

    • SHA1

      61bb61cce8bc6e7789bbf5021b4326b41fc8d0e5

    • SHA256

      304b63a4364fd1a92dce9fe0fd15a299ff5fd01ab4a2185dab446486ffe22694

    • SHA512

      9a71a0838321d4b9aadb28823a4d255e2d9959f0bab29abdd382982a0e3ec068a31ad73754f62decbc30b89c53755ed438249428a086541899b51b214969d519

    Score
    10/10
    valakLoaderpersistence

    • Valak

      Valak is a JavaScript loader, a link in a chain of distribution of other malware families.

      Loadervalak

    • Valak JavaScript Loader

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks