Overview

overview

8

Static

static

1

VMBHNCF{68...fc.msi

windows7-x64

VMBHNCF{68...fc.msi

windows10-2004-x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    VMBHNCF{68111D07-1E25-4791-835A-CA847E8E5AA0}®vnfc.msi

  • Size

    1.2MB

  • Sample

    231002-t38hbscg2s

  • MD5

    779319fcf4fb23620d0ced2b28263714

  • SHA1

    be1587efa66030b9725b49b90795e6647532661b

  • SHA256

    b9f6bae7ebc13ec7ed5e40a4e70674a66f1af23b6582b40c89faefb70a5576cf

  • SHA512

    96cf7620e7bd4cdb92373bcd5c4f0db23f8e4ef2eb5f327586277540c364dba216495662e82e02b5babb26f04c2387d5f7fad061bccf4560a3faac0c5f38f5e1

  • SSDEEP

    24576:IXUxLNIYVNMvZCFlp8zBQSc0ZoCEqKlqS0Ygll5RRYM/ZXAAM:IXgIY4W8zBQSc0ZnRKr8RRYGZXAA

Score
8/10
persistence

Malware Config

Targets

    • Target

      VMBHNCF{68111D07-1E25-4791-835A-CA847E8E5AA0}®vnfc.msi

    • Size

      1.2MB

    • MD5

      779319fcf4fb23620d0ced2b28263714

    • SHA1

      be1587efa66030b9725b49b90795e6647532661b

    • SHA256

      b9f6bae7ebc13ec7ed5e40a4e70674a66f1af23b6582b40c89faefb70a5576cf

    • SHA512

      96cf7620e7bd4cdb92373bcd5c4f0db23f8e4ef2eb5f327586277540c364dba216495662e82e02b5babb26f04c2387d5f7fad061bccf4560a3faac0c5f38f5e1

    • SSDEEP

      24576:IXUxLNIYVNMvZCFlp8zBQSc0ZoCEqKlqS0Ygll5RRYM/ZXAAM:IXgIY4W8zBQSc0ZnRKr8RRYGZXAA

    Score
    8/10
    persistence

    • Blocklisted process makes network request

    • Drops startup file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks