General

  • Target

    bc389f3dbd5c6cea3d5b1aa5c255848e

  • Size

    843KB

  • Sample

    240309-tgfkesbg36

  • MD5

    bc389f3dbd5c6cea3d5b1aa5c255848e

  • SHA1

    f97b8a4a13d856306cc24274e95c2b9c73b447a2

  • SHA256

    233a7844d1518b1695c9bfd71ca06fc1625ebc61f8d29f04099038ca5ce31950

  • SHA512

    dead0a2a1dbc33e5937e202df9902e5cf1369d9aab89b1a0308dbf57db9f14877174a8b6ad6bda97ac4d5b86c94ec11bc621347ae209a72c3c29f22efa0a7755

  • SSDEEP

    12288:UZWtI6RkeeZJys73dOvXDpNjNe8zkuxerQZb+md4w1U4ul:UuhaeeZJ8NI8zJerQZb+md4wmx

Score
10/10

Malware Config

Targets

    • Target

      bc389f3dbd5c6cea3d5b1aa5c255848e

    • Size

      843KB

    • MD5

      bc389f3dbd5c6cea3d5b1aa5c255848e

    • SHA1

      f97b8a4a13d856306cc24274e95c2b9c73b447a2

    • SHA256

      233a7844d1518b1695c9bfd71ca06fc1625ebc61f8d29f04099038ca5ce31950

    • SHA512

      dead0a2a1dbc33e5937e202df9902e5cf1369d9aab89b1a0308dbf57db9f14877174a8b6ad6bda97ac4d5b86c94ec11bc621347ae209a72c3c29f22efa0a7755

    • SSDEEP

      12288:UZWtI6RkeeZJys73dOvXDpNjNe8zkuxerQZb+md4w1U4ul:UuhaeeZJ8NI8zJerQZb+md4wmx

    Score
    10/10
    • Modifies visibility of file extensions in Explorer

    • Blocks application from running via registry modification

      Adds application to list of disallowed applications.

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks