General
-
Target
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567
-
Size
196KB
-
Sample
220707-eh2fyscfgl
-
MD5
04f347421ddddd5013348c1374ecd91d
-
SHA1
de2236b8e50e2237604a1ac6309cfa95ebaf6d5a
-
SHA256
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567
-
SHA512
39596148aae0c037f2776dd77c804c13d60a4847795b06b506b00d0c68e4c0d602419fa6810e8154ef6d95bbb76398f3a254bbc4e677bc19babe69b552d4000d
Static task
static1
Behavioral task
behavioral1
Sample
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567.exe
Resource
win10v2004-20220414-en
Malware Config
Targets
-
-
Target
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567
-
Size
196KB
-
MD5
04f347421ddddd5013348c1374ecd91d
-
SHA1
de2236b8e50e2237604a1ac6309cfa95ebaf6d5a
-
SHA256
637e7b4990ce67f023c7bba55f87fb80cc80b81ceff20057f8139dd2bffd0567
-
SHA512
39596148aae0c037f2776dd77c804c13d60a4847795b06b506b00d0c68e4c0d602419fa6810e8154ef6d95bbb76398f3a254bbc4e677bc19babe69b552d4000d
Score10/10-
Modifies WinLogon for persistence
-
Modifies system executable filetype association
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables use of System Restore points
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory
-