General

  • Target

    Vulkan.exe

  • Size

    28KB

  • Sample

    231112-e5wtzsde43

  • MD5

    481280e665df8ed0680ca7aecd2df457

  • SHA1

    578fe87cbe52aa081d8180ca12bb7c2ff5d5b448

  • SHA256

    b6d713942fa54c462d71606b687e5cabcd3754b37673639df77371be29e56b77

  • SHA512

    3126741cc95bd0b2cb6675d59e0af35dcfca7f6b16d51a8525c67637a30603d44650a0198e0b5a829b1cb87f4a19d589e1acf10c6e5ff4b944a14ae7e66b19cd

  • SSDEEP

    384:jBshUbC1c+9IIPdWBTRiekttMkeZ2dqEzQ0nc/KvGUl5wgCCCCCu+fHq:ChUydWBTRmMIdlBnlvGh

Score
8/10

Malware Config

Targets

    • Target

      Vulkan.exe

    • Size

      28KB

    • MD5

      481280e665df8ed0680ca7aecd2df457

    • SHA1

      578fe87cbe52aa081d8180ca12bb7c2ff5d5b448

    • SHA256

      b6d713942fa54c462d71606b687e5cabcd3754b37673639df77371be29e56b77

    • SHA512

      3126741cc95bd0b2cb6675d59e0af35dcfca7f6b16d51a8525c67637a30603d44650a0198e0b5a829b1cb87f4a19d589e1acf10c6e5ff4b944a14ae7e66b19cd

    • SSDEEP

      384:jBshUbC1c+9IIPdWBTRiekttMkeZ2dqEzQ0nc/KvGUl5wgCCCCCu+fHq:ChUydWBTRmMIdlBnlvGh

    Score
    8/10
    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks