Overview

overview

10

Static

static

2c75e50059...d5.dll

windows7_x64

10

2c75e50059...d5.dll

windows10-2004_x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c75e5005993fff65b5b8310c3c50c2e0ac219ba7014f5c480736636e7c5dcd5

  • Size

    304KB

  • Sample

    220201-mqhb2sdafj

  • MD5

    fc3ee202834c5bfd785b2b93c1608a08

  • SHA1

    ac7fdde56e486989d88290d6fc71f61c86958079

  • SHA256

    2c75e5005993fff65b5b8310c3c50c2e0ac219ba7014f5c480736636e7c5dcd5

  • SHA512

    fada49bc8ecc55c864ec4efdcd7e46240e583b5ece71f28a94badf8d528cf6aed8bcd200885c4ab7375835403505c9131447fd49bb9f49800668f1dd5cd56b2d

Score
10/10
valakLoaderpersistence

Malware Config

Targets

    • Target

      2c75e5005993fff65b5b8310c3c50c2e0ac219ba7014f5c480736636e7c5dcd5

    • Size

      304KB

    • MD5

      fc3ee202834c5bfd785b2b93c1608a08

    • SHA1

      ac7fdde56e486989d88290d6fc71f61c86958079

    • SHA256

      2c75e5005993fff65b5b8310c3c50c2e0ac219ba7014f5c480736636e7c5dcd5

    • SHA512

      fada49bc8ecc55c864ec4efdcd7e46240e583b5ece71f28a94badf8d528cf6aed8bcd200885c4ab7375835403505c9131447fd49bb9f49800668f1dd5cd56b2d

    Score
    10/10
    valakLoaderpersistence

    • Valak

      Valak is a JavaScript loader, a link in a chain of distribution of other malware families.

      Loadervalak

    • Valak JavaScript Loader

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks