General
-
Target
1d44e3a2c13c11d8657db2981d3cafa0.exe
-
Size
276KB
-
Sample
240102-s8lebahacr
-
MD5
1d44e3a2c13c11d8657db2981d3cafa0
-
SHA1
9319d4f39dcc8ff8756c5c72417d00384308b1fb
-
SHA256
9336fb8902065b2e50f365ef2f9e6fa2fa894e3d931ea2da1c187e326cdf2630
-
SHA512
00fee93220a15c4d225cfc33454ea818355021168c63a0b075ee08ab3abcff541caa7a003a8cfa7291bd3a4de9f30c3b6639399812e5fce9f498cfa31c9c9a7a
-
SSDEEP
6144:NI4N1tJsKnwnZ+hlKfQQ2AF52aFzWSyhRf4xyi4Co1W9UeRvXgAT:NbHIfQQ2ArpWJh9ic1iU6ws
Static task
static1
Behavioral task
behavioral1
Sample
1d44e3a2c13c11d8657db2981d3cafa0.exe
Resource
win7-20231215-en
Malware Config
Targets
-
-
Target
1d44e3a2c13c11d8657db2981d3cafa0.exe
-
Size
276KB
-
MD5
1d44e3a2c13c11d8657db2981d3cafa0
-
SHA1
9319d4f39dcc8ff8756c5c72417d00384308b1fb
-
SHA256
9336fb8902065b2e50f365ef2f9e6fa2fa894e3d931ea2da1c187e326cdf2630
-
SHA512
00fee93220a15c4d225cfc33454ea818355021168c63a0b075ee08ab3abcff541caa7a003a8cfa7291bd3a4de9f30c3b6639399812e5fce9f498cfa31c9c9a7a
-
SSDEEP
6144:NI4N1tJsKnwnZ+hlKfQQ2AF52aFzWSyhRf4xyi4Co1W9UeRvXgAT:NbHIfQQ2ArpWJh9ic1iU6ws
-
Modifies security service
-
Disables taskbar notifications via registry modification
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Create or Modify System Process
1Windows Service
1