General
-
Target
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1
-
Size
174KB
-
Sample
221124-axd7rafe58
-
MD5
2f04c452e01d4e9c829768d00cd7f180
-
SHA1
48b27f860f49fa8a04a66fa2bec6d5df0548fb2a
-
SHA256
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1
-
SHA512
fa2dee83195eebb74c29c63cf7d507c01f97d1a7694fdac6ad53bfa65a4860ecf1d24ac5125ecb4bd2936d8fd738df430ba3c65f320a597f0eff2ec2434d4728
-
SSDEEP
3072:acI/iJR0vAd796grWMRbctog9i0H2RyS/gTo10rC0UEnbCMgq346/s3:SK0od796gnbctogLH2Rd/lmroEnuZT3
Static task
static1
Behavioral task
behavioral1
Sample
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1
-
Size
174KB
-
MD5
2f04c452e01d4e9c829768d00cd7f180
-
SHA1
48b27f860f49fa8a04a66fa2bec6d5df0548fb2a
-
SHA256
0d0e787c1716b83e9b0902e7317e5923b8d4fd69783cfe9089a1cc064e06f4c1
-
SHA512
fa2dee83195eebb74c29c63cf7d507c01f97d1a7694fdac6ad53bfa65a4860ecf1d24ac5125ecb4bd2936d8fd738df430ba3c65f320a597f0eff2ec2434d4728
-
SSDEEP
3072:acI/iJR0vAd796grWMRbctog9i0H2RyS/gTo10rC0UEnbCMgq346/s3:SK0od796gnbctogLH2Rd/lmroEnuZT3
Score10/10-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-