General

  • Target

    a9ed9b688d2c8118a674a336afe54c3f.exe

  • Size

    1.4MB

  • Sample

    240107-x3kytadcd4

  • MD5

    a9ed9b688d2c8118a674a336afe54c3f

  • SHA1

    b0f2a15397f5a5d1aa0fcfd71716d0e679d2f180

  • SHA256

    879c768aaddd6d7ecb5df81cf0a3d664f708b81349dca6855afd97a440a80af7

  • SHA512

    16bf3dbb0aad22147874f01ba0fdaa322a84245a3b1c676aa6f10439e725ce1b74c6205c0ff7d6085262c6dd1908d996d41a163a69e0041f9a20329b33015aab

  • SSDEEP

    12288:UZWtI6RkEOKu9OXOKu9OXOKu9OXOKu9OXOKu9OXOKuhMut:Uuhax9

Score
10/10

Malware Config

Targets

    • Target

      a9ed9b688d2c8118a674a336afe54c3f.exe

    • Size

      1.4MB

    • MD5

      a9ed9b688d2c8118a674a336afe54c3f

    • SHA1

      b0f2a15397f5a5d1aa0fcfd71716d0e679d2f180

    • SHA256

      879c768aaddd6d7ecb5df81cf0a3d664f708b81349dca6855afd97a440a80af7

    • SHA512

      16bf3dbb0aad22147874f01ba0fdaa322a84245a3b1c676aa6f10439e725ce1b74c6205c0ff7d6085262c6dd1908d996d41a163a69e0041f9a20329b33015aab

    • SSDEEP

      12288:UZWtI6RkEOKu9OXOKu9OXOKu9OXOKu9OXOKu9OXOKuhMut:Uuhax9

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks