General

  • Target

    15da34442650004fecf7d059c9ad06ca884cf9f0d1432cf549b25345b911addc

  • Size

    224KB

  • Sample

    221127-kk3ppada52

  • MD5

    7009c6ab0cfad4098b7aa34bd290d780

  • SHA1

    ac376f7970755415748df042fac17578a840f6fe

  • SHA256

    15da34442650004fecf7d059c9ad06ca884cf9f0d1432cf549b25345b911addc

  • SHA512

    b2dbb1f7bb0dbe64452a08db0b0e7ea4b0f9f89fc2eb7475557454eac465e714daedf78ef4dfad6c58647ac1f3a864fde0491458844418d31420406dfb620ad5

  • SSDEEP

    6144:TzsTjPybOwj6Vt1Ab6wjeKY44cUAvldXpj7MKCDlNULAAOT:tkt1Abu42UlLEDsAT

Score
10/10

Malware Config

Targets

    • Target

      15da34442650004fecf7d059c9ad06ca884cf9f0d1432cf549b25345b911addc

    • Size

      224KB

    • MD5

      7009c6ab0cfad4098b7aa34bd290d780

    • SHA1

      ac376f7970755415748df042fac17578a840f6fe

    • SHA256

      15da34442650004fecf7d059c9ad06ca884cf9f0d1432cf549b25345b911addc

    • SHA512

      b2dbb1f7bb0dbe64452a08db0b0e7ea4b0f9f89fc2eb7475557454eac465e714daedf78ef4dfad6c58647ac1f3a864fde0491458844418d31420406dfb620ad5

    • SSDEEP

      6144:TzsTjPybOwj6Vt1Ab6wjeKY44cUAvldXpj7MKCDlNULAAOT:tkt1Abu42UlLEDsAT

    Score
    10/10
    • Modifies firewall policy service

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks