General
-
Target
d4854e84bd7bac0a990510da8c785a1b
-
Size
283KB
-
Sample
240318-zvgyasaf9z
-
MD5
d4854e84bd7bac0a990510da8c785a1b
-
SHA1
b073eb3909ddacb722dbed00b5f91faf46f51b5b
-
SHA256
27ade500cb3a75dc5be5f9ae7e3049714d30ebc715a9f4d230ac79dbb76023ad
-
SHA512
cce06c8465d36050db2138ec3e673a94bcfaeb31dc9cc38a0a5a92140acebf581d0cc312dedb01c42dd1f85238854022c0156513a8b6fb3caa2bed25140c9a7d
-
SSDEEP
6144:89QrX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:u0EXSopNBFow9mLRPKkALVduF
Static task
static1
Behavioral task
behavioral1
Sample
d4854e84bd7bac0a990510da8c785a1b.exe
Resource
win7-20240221-en
Malware Config
Targets
-
-
Target
d4854e84bd7bac0a990510da8c785a1b
-
Size
283KB
-
MD5
d4854e84bd7bac0a990510da8c785a1b
-
SHA1
b073eb3909ddacb722dbed00b5f91faf46f51b5b
-
SHA256
27ade500cb3a75dc5be5f9ae7e3049714d30ebc715a9f4d230ac79dbb76023ad
-
SHA512
cce06c8465d36050db2138ec3e673a94bcfaeb31dc9cc38a0a5a92140acebf581d0cc312dedb01c42dd1f85238854022c0156513a8b6fb3caa2bed25140c9a7d
-
SSDEEP
6144:89QrX1EXSopNBF0BB2LceVV2LRENC/KkFCL4d6QuJVwGUFke:u0EXSopNBFow9mLRPKkALVduF
-
Modifies security service
-
Disables taskbar notifications via registry modification
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2Privilege Escalation
Create or Modify System Process
1Windows Service
1Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
2