Overview

overview

6

Static

static

3

Win 10 Tweaker.exe

windows10-1703-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target

    Win 10 Tweaker.exe

  • Size

    1.7MB

  • Sample

    231119-ksf6nahc99

  • MD5

    22c5cd9005c07f1caad4c598969f026f

  • SHA1

    33879fa035571b3c965d6953882de7a4b38e74c6

  • SHA256

    a2bd05175b0a124e7a081a361df7ec0f4d3fe1d2f02ca9e7e19847c776989f94

  • SHA512

    417c84242654b0021db8f0ab210aee3104d81e467b7e47ac55c3e8d1b60be5c5bae47f61047a5ac027cf771a5fc2a264d1949f1247c70ad819c9f87c053d6a32

  • SSDEEP

    24576:PcV8ZtpBjbIhM/OPdb+ccGzTYJV80+K6LPlpxfMivxNK:UV8ZBjbISGwL780+ZLlpxfMivxN

Score
6/10
evasiontrojan

Malware Config

Targets

    • Target

      Win 10 Tweaker.exe

    • Size

      1.7MB

    • MD5

      22c5cd9005c07f1caad4c598969f026f

    • SHA1

      33879fa035571b3c965d6953882de7a4b38e74c6

    • SHA256

      a2bd05175b0a124e7a081a361df7ec0f4d3fe1d2f02ca9e7e19847c776989f94

    • SHA512

      417c84242654b0021db8f0ab210aee3104d81e467b7e47ac55c3e8d1b60be5c5bae47f61047a5ac027cf771a5fc2a264d1949f1247c70ad819c9f87c053d6a32

    • SSDEEP

      24576:PcV8ZtpBjbIhM/OPdb+ccGzTYJV80+K6LPlpxfMivxNK:UV8ZBjbISGwL780+ZLlpxfMivxN

    Score
    6/10
    evasiontrojan

    • Checks whether UAC is enabled

      evasiontrojan

    • Modifies boot configuration data using bcdedit

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks