General

  • Target

    8e15304b91ed59783d09925b6a78e10b

  • Size

    152KB

  • Sample

    240204-dt7axagab9

  • MD5

    8e15304b91ed59783d09925b6a78e10b

  • SHA1

    fff46e09a57a29376e9f84fef3d3468b69166b78

  • SHA256

    bddf53330bf51176ef12018b4d8a62e1540d7975b065b02256a0f6df8ffc0232

  • SHA512

    f8d53763a7bd4e7321d17e0b7ccd10d3bef2bf11c658fbd2ce0e9ddf0520fca983b4ff689fcef4b95af95c7942e5b4c67f1e11446a936ecf29e8d63f611caba0

  • SSDEEP

    3072:xrf6REvQdveO5V/1BW3zVp6Jmg+xgDAVchJB/qQPIS+rTIOC16zYRY:0VeO5V9IjgV+xleBPIS066zSY

Score
10/10

Malware Config

Targets

    • Target

      8e15304b91ed59783d09925b6a78e10b

    • Size

      152KB

    • MD5

      8e15304b91ed59783d09925b6a78e10b

    • SHA1

      fff46e09a57a29376e9f84fef3d3468b69166b78

    • SHA256

      bddf53330bf51176ef12018b4d8a62e1540d7975b065b02256a0f6df8ffc0232

    • SHA512

      f8d53763a7bd4e7321d17e0b7ccd10d3bef2bf11c658fbd2ce0e9ddf0520fca983b4ff689fcef4b95af95c7942e5b4c67f1e11446a936ecf29e8d63f611caba0

    • SSDEEP

      3072:xrf6REvQdveO5V/1BW3zVp6Jmg+xgDAVchJB/qQPIS+rTIOC16zYRY:0VeO5V9IjgV+xleBPIS066zSY

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Windows security bypass

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Disables cmd.exe use via registry modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

MITRE ATT&CK Enterprise v15

Tasks