General
-
Target
Arc_Spoofer.zip
-
Size
41KB
-
Sample
240222-qlvncsaa2s
-
MD5
036ec6c53db8f95b768ba73e52bc2ed5
-
SHA1
7fc76a30e6c4f95239f6f06d4731153f1e3e52ec
-
SHA256
0a54469a29336e4bb06f88e42dcbdb1294603689ae54ad1b18134041bb6470e2
-
SHA512
82ac70535165974828653ef74f334b7f40bb36414de37224476764891a78f255b626d3cfe6290483937651d667a4a851d0cb5808f1f52e9fd5342a4ee990b2b0
-
SSDEEP
768:/UMiHEhp2vCIODrhNGkAalt/bp2GiKlIPJV1Aoi+vZPJSFmGiU0Jv1uwib:/UKP2vCF1Aalt/keIPhDjZPJSFmLq
Static task
static1
Behavioral task
behavioral1
Sample
Arc_Spoofer.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
Arc_Spoofer.zip
Resource
win11-20240221-en
Behavioral task
behavioral3
Sample
Woofer/42.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral4
Sample
Woofer/42.zip
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
Woofer/README.md
Resource
win10v2004-20240221-en
Behavioral task
behavioral6
Sample
Woofer/README.md
Resource
win11-20240221-en
Malware Config
Targets
-
-
Target
Arc_Spoofer.zip
-
Size
41KB
-
MD5
036ec6c53db8f95b768ba73e52bc2ed5
-
SHA1
7fc76a30e6c4f95239f6f06d4731153f1e3e52ec
-
SHA256
0a54469a29336e4bb06f88e42dcbdb1294603689ae54ad1b18134041bb6470e2
-
SHA512
82ac70535165974828653ef74f334b7f40bb36414de37224476764891a78f255b626d3cfe6290483937651d667a4a851d0cb5808f1f52e9fd5342a4ee990b2b0
-
SSDEEP
768:/UMiHEhp2vCIODrhNGkAalt/bp2GiKlIPJV1Aoi+vZPJSFmGiU0Jv1uwib:/UKP2vCF1Aalt/keIPhDjZPJSFmLq
Score10/10-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Drops desktop.ini file(s)
-
Sets desktop wallpaper using registry
-
-
-
Target
Woofer/42.zip
-
Size
41KB
-
MD5
1df9a18b18332f153918030b7b516615
-
SHA1
6c42c62696616b72bbfc88a4be4ead57aa7bc503
-
SHA256
bbd05de19aa2af1455c0494639215898a15286d9b05073b6c4817fe24b2c36fa
-
SHA512
6382ca9c307d66ab7566acf78b1afd44b18b24d766253e1dc1cb3a3c0be96ecf1f2042d6bd3332d49078ffee571cf98869c1284c1d3e5c1c7dc3e4c64f71af80
-
SSDEEP
768:hzyVr8GSKL6O3QOXk/0u3wqOghrFCezL1VFJdbq2QTJTw02Q:hGx8DKXE//ZhhCirFi2cwK
Score1/10 -
-
-
Target
Woofer/README.md
-
Size
1KB
-
MD5
6e4616e9582ad27dadf48c5b62b53cca
-
SHA1
49c76a22735223a85cca9f46c62b346c7e74db78
-
SHA256
e6452e165b2c3e6056191326033ddcf8fcab36907bc6fe417954d5cb818a54e0
-
SHA512
86763d4487f75e182fd329c58b400a86c9fcbd5476748ee321a10d493b9898cabc96855d1f5a04a2258db149aa79ee870f2f2fcf351cfdce843ff497f025e3d0
Score3/10 -
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1