General

  • Target

    2e760ad9ae99eeb15bb26ddf384cecff3e0521e828293c214c04419125c5298c

  • Size

    366KB

  • Sample

    221029-fjgcvacehn

  • MD5

    048d300eb0c9864ab9256f09261afdf6

  • SHA1

    ba9542e6d9aa3820fb8283e13b71503b4d2bbf62

  • SHA256

    2e760ad9ae99eeb15bb26ddf384cecff3e0521e828293c214c04419125c5298c

  • SHA512

    f81e0cdf36abdd3660d5e590121fa0fc6197ada5dc2b672bf36b0862840aa5ad744f851ca57a68a9eb8b953ad3aec7789d3ac99ec8fbea3598846b45aa79e199

  • SSDEEP

    6144:xCTPgrnq0/FniJi6uTJKvePPMqLckUet72FwBI+AFdb8MupVQO8uZUE4MO:xCTPgrnZiJiAaMVkUet7EwBI+APu4Ujg

Score
10/10

Malware Config

Targets

    • Target

      2e760ad9ae99eeb15bb26ddf384cecff3e0521e828293c214c04419125c5298c

    • Size

      366KB

    • MD5

      048d300eb0c9864ab9256f09261afdf6

    • SHA1

      ba9542e6d9aa3820fb8283e13b71503b4d2bbf62

    • SHA256

      2e760ad9ae99eeb15bb26ddf384cecff3e0521e828293c214c04419125c5298c

    • SHA512

      f81e0cdf36abdd3660d5e590121fa0fc6197ada5dc2b672bf36b0862840aa5ad744f851ca57a68a9eb8b953ad3aec7789d3ac99ec8fbea3598846b45aa79e199

    • SSDEEP

      6144:xCTPgrnq0/FniJi6uTJKvePPMqLckUet72FwBI+AFdb8MupVQO8uZUE4MO:xCTPgrnZiJiAaMVkUet7EwBI+APu4Ujg

    Score
    10/10
    • Modifies system executable filetype association

    • Modifies visibility of file extensions in Explorer

    • Disables use of System Restore points

    • Adds Run key to start application

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks