General

  • Target

    de6c543727236cc1a156b34d5df10b82_JC.exe

  • Size

    157KB

  • Sample

    231012-btff3sff61

  • MD5

    de6c543727236cc1a156b34d5df10b82

  • SHA1

    8ad6e176dce40f1ed968c0de3896a7748ce30c3d

  • SHA256

    1c87d766b4f642b679b9754022726d6028d30d8c456cd00d8fe4ab738a926c8d

  • SHA512

    cb2d45f5b49a4afed3c605a57ec8371ca9e05d8e4def2f004f5a4cf92ff267c6f3a784d6f072ca35730e80458d7c2f880d4a8c4ddb4987aad32b6756d5867d72

  • SSDEEP

    3072:NTlbN/Oe9rt5bEkSAcGGIAtpCcabjF76x553:NTZdOe9JZEkDc/ICpCcQx76x51

Score
10/10

Malware Config

Targets

    • Target

      de6c543727236cc1a156b34d5df10b82_JC.exe

    • Size

      157KB

    • MD5

      de6c543727236cc1a156b34d5df10b82

    • SHA1

      8ad6e176dce40f1ed968c0de3896a7748ce30c3d

    • SHA256

      1c87d766b4f642b679b9754022726d6028d30d8c456cd00d8fe4ab738a926c8d

    • SHA512

      cb2d45f5b49a4afed3c605a57ec8371ca9e05d8e4def2f004f5a4cf92ff267c6f3a784d6f072ca35730e80458d7c2f880d4a8c4ddb4987aad32b6756d5867d72

    • SSDEEP

      3072:NTlbN/Oe9rt5bEkSAcGGIAtpCcabjF76x553:NTZdOe9JZEkDc/ICpCcQx76x51

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

MITRE ATT&CK Enterprise v15

Tasks