General
- Target PC Defender v2.zip
- Size 789KB
- Sample240302-t6f79afd68
- SHA256 854113f2737ee276ba34fac399e8a615e4de4c712dd7a761ab0e198fa09d87fc
- MD5 cad618323b07c0f4f6273ae08df1779e
- SHA1 e67715f81f83ce7cda32f12a116cc950b6fd0dac
- SHA512 efd9403706accfe996b5df58300b5e0a0b461727bdf7c5492e9914369fef09ae06cdc2d00d30ac6d494fc68dadcf423d800741f7c22d5c1d565ef3fc675c4565
- SSDEEP 24576:btiUqYRf3p96/VG8K8LtegdCDUcbdbbUJ9rV:btipYF3JategwDU029rV
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Static task
static1
18 signatures
150 seconds
Malware Config
Targets
-
- Target [email protected]
- Size 860KB
- SHA256 df2e3b2222dcdbb5e0dbdd1200ec8fd5f67fcbea99e0023df54307eab60030ff
- MD5 b3dce5c3f95a18fd076fad0f73bb9e39
- SHA1 e80cc285a77302ee221f47e4e94823d4b2eba368
- SHA512 c184436055cf74884ad0d2bd5ca00bcd5a62d6be46253fe8c71b4daaa5c710b9df34af1b6e41f6d1af94bcdec0d33679a6a1b34bf9755678b4e177f368c11d4c
- SSDEEP 24576:TkRBL2LYcyvue73Ze+RrM31N0vhMN0T4+ZI:TkRBLgiue73Ze+SWI+Z
- MD5 SHA1 SHA512 SSDEEP
Score6/10-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon for persistence
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1