General

  • Target

    ed14cf918c07ec628d8868c18572015883477e1e756126dfc71940fa32960c7b

  • Size

    68KB

  • Sample

    221107-1h2bvadabp

  • MD5

    0d65b7b2cfc90e912920cfa0e2e88430

  • SHA1

    0c533e6c185e94ee8650367ea16fb369a28d898f

  • SHA256

    ed14cf918c07ec628d8868c18572015883477e1e756126dfc71940fa32960c7b

  • SHA512

    9e09e46f73cbb69900b9f6fa72fa25e8475b1d39fd0bcc7fe7af194f55ec857a130f77cabf54e30510e08a356cab3069d1f25a2e1199be18afc61c3f19ccd59e

  • SSDEEP

    1536:LBgdzBml7uiBCbgeD0MsCZtkmdUEqT+dv:LB+VmluiBCbgeDAC7XdUEI+p

Score
10/10

Malware Config

Targets

    • Target

      ed14cf918c07ec628d8868c18572015883477e1e756126dfc71940fa32960c7b

    • Size

      68KB

    • MD5

      0d65b7b2cfc90e912920cfa0e2e88430

    • SHA1

      0c533e6c185e94ee8650367ea16fb369a28d898f

    • SHA256

      ed14cf918c07ec628d8868c18572015883477e1e756126dfc71940fa32960c7b

    • SHA512

      9e09e46f73cbb69900b9f6fa72fa25e8475b1d39fd0bcc7fe7af194f55ec857a130f77cabf54e30510e08a356cab3069d1f25a2e1199be18afc61c3f19ccd59e

    • SSDEEP

      1536:LBgdzBml7uiBCbgeD0MsCZtkmdUEqT+dv:LB+VmluiBCbgeDAC7XdUEI+p

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Sets file to hidden

      Modifies file attributes to stop it showing in Explorer etc.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks