General
- Target Flash8-en.exe
- Size 310KB
- Sample240326-2qwa8sed39
- SHA256 a2a021d0b7a33c8dccca1d280717640fe773129ca10ce6e0682befb90b1fd5ff
- MD5 fe290252aa598316192a02c0f0bfd52e
- SHA1 7587a1613140d0a5a6c60a347ecd663f8dfc5375
- SHA512 9bb4ec8e4479fb839a17998b7624d9606d3c8685512da9da34565437371856b2ff6bd9b2673bad6fad0ee9da93b53d6454fdcd80ea9d0edc3b970cdd9486d8a8
- SSDEEP 3072:4izgAkHnjPIQ6KSEX//HiPaW+LN7DxRLlzglK3JN4:7gAkHnjPIQBSEHCPCN7jB3JN4
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Flash8-en.html
Resource
win7-20240221-en
7 signatures
1800 seconds
Behavioral task
behavioral2
Sample
Flash8-en.html
Resource
win10v2004-20231215-en
31 signatures
1800 seconds
Malware Config
Targets
-
- Target Flash8-en.exe
- Size 310KB
- SHA256 a2a021d0b7a33c8dccca1d280717640fe773129ca10ce6e0682befb90b1fd5ff
- MD5 fe290252aa598316192a02c0f0bfd52e
- SHA1 7587a1613140d0a5a6c60a347ecd663f8dfc5375
- SHA512 9bb4ec8e4479fb839a17998b7624d9606d3c8685512da9da34565437371856b2ff6bd9b2673bad6fad0ee9da93b53d6454fdcd80ea9d0edc3b970cdd9486d8a8
- SSDEEP 3072:4izgAkHnjPIQ6KSEX//HiPaW+LN7DxRLlzglK3JN4:7gAkHnjPIQBSEHCPCN7jB3JN4
- MD5 SHA1 SHA512 SSDEEP
Score8/10Downloads MZ/PE file
Modifies Installed Components in the registry
Executes dropped EXE
Loads dropped DLL
Blocklisted process makes network request
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
Drops file in System32 directory
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Modify Registry
4Subvert Trust Controls
1Install Root Certificate
1