Overview

overview

10

Static

static

1907cb31a7...e9.dll

windows7_x64

10

1907cb31a7...e9.dll

windows10-2004_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1907cb31a7cf2b9d72a04bffc54f3c3e586185f52f34c55a9c2801e5f0a3ece9

  • Size

    304KB

  • Sample

    220201-mxkqradbgp

  • MD5

    ebfdc4d7dde8997830fb7f5fa0f57bb4

  • SHA1

    37fa2d70133adf5af114b15aff803fb52ad597c8

  • SHA256

    1907cb31a7cf2b9d72a04bffc54f3c3e586185f52f34c55a9c2801e5f0a3ece9

  • SHA512

    1d28659b13ac3646ab80af537be2b8aa290ace1eeca81161e5dc9ee0ddba2a12c241d2f1e240f508322bd338f4b9b9b9e4ff312fc557b2787e320eb6d2d50198

Score
10/10
valakLoaderpersistence

Malware Config

Targets

    • Target

      1907cb31a7cf2b9d72a04bffc54f3c3e586185f52f34c55a9c2801e5f0a3ece9

    • Size

      304KB

    • MD5

      ebfdc4d7dde8997830fb7f5fa0f57bb4

    • SHA1

      37fa2d70133adf5af114b15aff803fb52ad597c8

    • SHA256

      1907cb31a7cf2b9d72a04bffc54f3c3e586185f52f34c55a9c2801e5f0a3ece9

    • SHA512

      1d28659b13ac3646ab80af537be2b8aa290ace1eeca81161e5dc9ee0ddba2a12c241d2f1e240f508322bd338f4b9b9b9e4ff312fc557b2787e320eb6d2d50198

    Score
    10/10
    valakLoaderpersistence

    • Valak

      Valak is a JavaScript loader, a link in a chain of distribution of other malware families.

      Loadervalak

    • Valak JavaScript Loader

    • Blocklisted process makes network request

    • Sets service image path in registry

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks