General
-
Target
1b67640930c48ffe64fd84c3e18cee228d72c20fc4b63f2d7c85c9a5d59789bf
-
Size
942KB
-
Sample
230224-en7j6acb31
-
MD5
80c853a84b0a23132d24480635bc3cfc
-
SHA1
df9e8575bf6fb4d02e2c99dd011a0ebb821e7655
-
SHA256
1b67640930c48ffe64fd84c3e18cee228d72c20fc4b63f2d7c85c9a5d59789bf
-
SHA512
8a7df77d80683d8454363aefe5cd16e39981ea4950c8343e60931e10746a4e825836198334c71b8046d6d121691e850cd4fd1707abf5de24a06572aeb836f5e8
-
SSDEEP
24576:vEx45zxI+3iVv8ywrIxJGQXFVq6+CkEot7c3BO:bzxIrVvirIxJGQXFVq6+Oot
Behavioral task
behavioral1
Sample
1b67640930c48ffe64fd84c3e18cee228d72c20fc4b63f2d7c85c9a5d59789bf.exe
Resource
win7-20230220-en
Malware Config
Targets
-
-
Target
1b67640930c48ffe64fd84c3e18cee228d72c20fc4b63f2d7c85c9a5d59789bf
-
Size
942KB
-
MD5
80c853a84b0a23132d24480635bc3cfc
-
SHA1
df9e8575bf6fb4d02e2c99dd011a0ebb821e7655
-
SHA256
1b67640930c48ffe64fd84c3e18cee228d72c20fc4b63f2d7c85c9a5d59789bf
-
SHA512
8a7df77d80683d8454363aefe5cd16e39981ea4950c8343e60931e10746a4e825836198334c71b8046d6d121691e850cd4fd1707abf5de24a06572aeb836f5e8
-
SSDEEP
24576:vEx45zxI+3iVv8ywrIxJGQXFVq6+CkEot7c3BO:bzxIrVvirIxJGQXFVq6+Oot
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables taskbar notifications via registry modification
-
Possible privilege escalation attempt
-
Deletes itself
-
Executes dropped EXE
-
Modifies file permissions
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-
MITRE ATT&CK Matrix ATT&CK v6
Persistence
Hidden Files and Directories
4Change Default File Association
1Registry Run Keys / Startup Folder
1Defense Evasion
Hidden Files and Directories
4Modify Registry
10Bypass User Account Control
1Disabling Security Tools
1File Permissions Modification
1