General
-
Target
2b5203f32e9aaad06d6cd62dd1a2fc48cbbb277acbddb522fc779fee8d0329e8
-
Size
1.4MB
-
Sample
230801-emjrpsed3x
-
MD5
d7f7b524053a3b1ca279f5a4f093ce4e
-
SHA1
8ce4f3b580b4051398e32722984fd927ceb8b36c
-
SHA256
2b5203f32e9aaad06d6cd62dd1a2fc48cbbb277acbddb522fc779fee8d0329e8
-
SHA512
855024f167df28e3609ae735f5a50b1e0046dcf798e6769fe4eaed345810ec6c615e750a535d8e12d951c4794846ece03875c1f45442c46d52a6437b15bf987d
-
SSDEEP
24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk
Static task
static1
Behavioral task
behavioral1
Sample
2b5203f32e9aaad06d6cd62dd1a2fc48cbbb277acbddb522fc779fee8d0329e8.exe
Resource
win10v2004-20230703-en
Malware Config
Targets
-
-
Target
2b5203f32e9aaad06d6cd62dd1a2fc48cbbb277acbddb522fc779fee8d0329e8
-
Size
1.4MB
-
MD5
d7f7b524053a3b1ca279f5a4f093ce4e
-
SHA1
8ce4f3b580b4051398e32722984fd927ceb8b36c
-
SHA256
2b5203f32e9aaad06d6cd62dd1a2fc48cbbb277acbddb522fc779fee8d0329e8
-
SHA512
855024f167df28e3609ae735f5a50b1e0046dcf798e6769fe4eaed345810ec6c615e750a535d8e12d951c4794846ece03875c1f45442c46d52a6437b15bf987d
-
SSDEEP
24576:U2G/nvxW3Ww0tRp8GiXTBhq7yRDvHcUcjUvy0lr3Tl6icOB/UWoT:UbA30H4zF0UMSAicOB/UWk
Score8/10-
Modifies Windows Firewall
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Create or Modify System Process
1Windows Service
1