General
-
Target
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a
-
Size
42KB
-
Sample
221203-3mysmaff34
-
MD5
78c546cf06c5ff2d50b8b22b4875e06f
-
SHA1
3840d1c0508e8c280fd9a1c09446b5244c98e360
-
SHA256
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a
-
SHA512
65accd1cdc684eb282122db0c28163a777a33a005b1a4e6b55405ccf147640ebc986a9031551df9bcbf0afc78b5996fcdd6a3287ed108051b50a7201e3e6ac6e
-
SSDEEP
768:Bp2SSSDN7OylSYkvxev67rdiw8wRd3mNjGBlgusU1vzsxY83:/2SzDN6yY/vxPiLad3mNyB91v4xYK
Behavioral task
behavioral1
Sample
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a
-
Size
42KB
-
MD5
78c546cf06c5ff2d50b8b22b4875e06f
-
SHA1
3840d1c0508e8c280fd9a1c09446b5244c98e360
-
SHA256
d3e8c9827608d558c7ffbfa1154b81d33d68bf586d65e7b53e94faec90f2581a
-
SHA512
65accd1cdc684eb282122db0c28163a777a33a005b1a4e6b55405ccf147640ebc986a9031551df9bcbf0afc78b5996fcdd6a3287ed108051b50a7201e3e6ac6e
-
SSDEEP
768:Bp2SSSDN7OylSYkvxev67rdiw8wRd3mNjGBlgusU1vzsxY83:/2SzDN6yY/vxPiLad3mNyB91v4xYK
Score10/10-
Modifies firewall policy service
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Drops file in Drivers directory
-
Deletes itself
-
Loads dropped DLL
-
Modifies WinLogon
-
Drops file in System32 directory
-