General
-
Target
Rafatus69@brudna-maupa.bin.zip
-
Size
5.6MB
-
Sample
240416-b291naga6y
-
MD5
2dd1edab3052d5aaa2f53e222aa0aa05
-
SHA1
c321a595519359829d3e28afd7330251a2128da7
-
SHA256
024d96dc2522612d3d317bd35966ecc20b252ffb3ab7b8ca795d7dafc9280579
-
SHA512
f6f172b37434c438fd24ca1dd9ad740006a35e62ae5b07bda383428fb68ef98a3befd2703f81492e91f92fa48d114ee6d441f95182dd4724965bac0032cf5766
-
SSDEEP
98304:LuOBqJpjfa6ir1WrntGjWfjmJ/o5d/vUOgRFOkbWceUgsgh/iL9jz4onH46ASfO1:L1QJpNi0zZLmhadTgRFhFeUgddsZzJJK
Static task
static1
Behavioral task
behavioral1
Sample
Rafatus69@brudna-maupa.exe
Resource
win7-20240220-en
Malware Config
Targets
-
-
Target
Rafatus69@brudna-maupa.bin
-
Size
6.4MB
-
MD5
9c352d2ce0c0bdc40c72f52ce3480577
-
SHA1
bd4c956186f33c92eb4469f7e5675510d0790e99
-
SHA256
d7e6580054525d3f21f86edfc9f30b7a75ffa829a1eb67ee3cab33f0040dba4e
-
SHA512
c1926d59272df0e049467f4497bcc3631bbc1aa5337e87f4af31bfdba60c9ef460e394380024ffa7e71fef8938761d48d75e9dc93dc7529d2b9c8c638dddae92
-
SSDEEP
196608:/dAMaWetTeAkLIdx751qFTkub//73lc6u7b5VJ2Yx5xIdk3:naWedh+Idx75QYub//73lc6u7bLMYxD
Score8/10-
Modifies AppInit DLL entries
-
Modifies Installed Components in the registry
-
Possible privilege escalation attempt
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies file permissions
-
Adds Run key to start application
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-