Overview

overview

8

Static

static

1

FPS1.cmd

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    FPS1.cmd

  • Size

    420B

  • Sample

    240415-wwvn1ada22

  • MD5

    db46b03386626829672d0315bab0fda2

  • SHA1

    0a404684ab0962e6a9cb54f620e7134c47fa29b3

  • SHA256

    12a0964e7ef5a0b2868e0da964bdbd52b895351af6ac86871f5cf3ce75f485e8

  • SHA512

    d898d50f7b41c402c6c4293bf689840e7d2822e2a05fbce00acb30af8cdc1d333da914a48df8e4c4bd4b2d28b40563522b3a47f026a99426ae157ce9ed98a77f

Score
8/10

Malware Config

Targets

    • Target

      FPS1.cmd

    • Size

      420B

    • MD5

      db46b03386626829672d0315bab0fda2

    • SHA1

      0a404684ab0962e6a9cb54f620e7134c47fa29b3

    • SHA256

      12a0964e7ef5a0b2868e0da964bdbd52b895351af6ac86871f5cf3ce75f485e8

    • SHA512

      d898d50f7b41c402c6c4293bf689840e7d2822e2a05fbce00acb30af8cdc1d333da914a48df8e4c4bd4b2d28b40563522b3a47f026a99426ae157ce9ed98a77f

    Score
    8/10

    • Drops file in Drivers directory

    • Manipulates Digital Signatures

      Attackers can apply techniques such as modifying certain DLL exports to make their binary seem valid.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks