General
- Target a4ac9a267d30bbd90e7305ecd29ed4e7.exe
- Size 480KB
- Sample240107-x2s8ssdcb3
- SHA256 2574e9a742b102417c4e2afe4ea95e8e8e2115b64c1bb0e8b230e127a757f6e4
- MD5 a4ac9a267d30bbd90e7305ecd29ed4e7
- SHA1 011560d4f7264e1fe30082d531cf14d3b9093a3f
- SHA512 b3af730608e4755cb517844059b9daf0a91f414c9d4317bad5e3c0f5d84f35f947319a19ac13ddd9500a06fb6f55dd46d145305aba6b243a5b7e0679cfd312be
- SSDEEP 6144:Ks2t/BDCTlP8rF14db9pOfFZ4iAju7fd5CjW6c9MVdMUQqOP6msgeHgRcefczEgT:ut/BDChWFSdgNKK0yWdvQZsgeqczEd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a4ac9a267d30bbd90e7305ecd29ed4e7.exe
Resource
win7-20231215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
a4ac9a267d30bbd90e7305ecd29ed4e7.exe
Resource
win10v2004-20231215-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target a4ac9a267d30bbd90e7305ecd29ed4e7.exe
- Size 480KB
- SHA256 2574e9a742b102417c4e2afe4ea95e8e8e2115b64c1bb0e8b230e127a757f6e4
- MD5 a4ac9a267d30bbd90e7305ecd29ed4e7
- SHA1 011560d4f7264e1fe30082d531cf14d3b9093a3f
- SHA512 b3af730608e4755cb517844059b9daf0a91f414c9d4317bad5e3c0f5d84f35f947319a19ac13ddd9500a06fb6f55dd46d145305aba6b243a5b7e0679cfd312be
- SSDEEP 6144:Ks2t/BDCTlP8rF14db9pOfFZ4iAju7fd5CjW6c9MVdMUQqOP6msgeHgRcefczEgT:ut/BDChWFSdgNKK0yWdvQZsgeqczEd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies visibility of file extensions in Explorer
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1