General

  • Target

    7616275bfb9bb2e08182262559914ebc6977caa9dbed5a62ca1b59ca7286dde2

  • Size

    681KB

  • Sample

    221124-kqh78sfb4s

  • MD5

    bae78990f19c7c7f5c58a700fe6fdd40

  • SHA1

    ba8acf05b45be4fa69aecba8ebc11b5fa13f158f

  • SHA256

    7616275bfb9bb2e08182262559914ebc6977caa9dbed5a62ca1b59ca7286dde2

  • SHA512

    3e3da5c8c3163776e3f57df68430643a7c796908a6219ae7905a82ad9629c32d966eb8034bf0a43a21441d88efa6896aca2903aa92fe46118284862cec914ced

  • SSDEEP

    6144:5uHO3B/nmy+g43GFrQZb++tdsHP4+QfI6UR/UOPSe570Szp3be/JK3uYjRmmG/c:gO3B/IerQZb+md4w1UaOB03JOuD6

Score
10/10

Malware Config

Targets

    • Target

      7616275bfb9bb2e08182262559914ebc6977caa9dbed5a62ca1b59ca7286dde2

    • Size

      681KB

    • MD5

      bae78990f19c7c7f5c58a700fe6fdd40

    • SHA1

      ba8acf05b45be4fa69aecba8ebc11b5fa13f158f

    • SHA256

      7616275bfb9bb2e08182262559914ebc6977caa9dbed5a62ca1b59ca7286dde2

    • SHA512

      3e3da5c8c3163776e3f57df68430643a7c796908a6219ae7905a82ad9629c32d966eb8034bf0a43a21441d88efa6896aca2903aa92fe46118284862cec914ced

    • SSDEEP

      6144:5uHO3B/nmy+g43GFrQZb++tdsHP4+QfI6UR/UOPSe570Szp3be/JK3uYjRmmG/c:gO3B/IerQZb+md4w1UaOB03JOuD6

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Executes dropped EXE

    • Sets file execution options in registry

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks