General
-
Target
9deeefd04b57e35c28f7b7bd1a2ae58065803ec3693142cdc859e0f236bade25
-
Size
904KB
-
Sample
240523-rtwq3aed87
-
MD5
a4b64a18ff8998f2d9482b2925af2edc
-
SHA1
a5f1988c24d0171b9cab6024370c890cddf79c18
-
SHA256
9deeefd04b57e35c28f7b7bd1a2ae58065803ec3693142cdc859e0f236bade25
-
SHA512
26693b01f463a3dafb2c87dd8b3a3d65c01fae87dc2d914c265a022a980a91625e4b4a9ab8f5947c5167ab2fa409df04d4f544030070d1fc8e128e99db477b57
-
SSDEEP
12288:gjfNnlePEz+Nq7+fDirAayFFGQ82CIKMTroeEPv06LxGBMi:gj3eP++I7kDqA8VMAeE30pP
Static task
static1
Behavioral task
behavioral1
Sample
9deeefd04b57e35c28f7b7bd1a2ae58065803ec3693142cdc859e0f236bade25.exe
Resource
win7-20240419-en
Malware Config
Extracted
sality
http://89.119.67.154/testo5/
http://kukutrustnet777.info/home.gif
http://kukutrustnet888.info/home.gif
http://kukutrustnet987.info/home.gif
http://www.klkjwre9fqwieluoi.info/
http://kukutrustnet777888.info/
Targets
-
-
Target
9deeefd04b57e35c28f7b7bd1a2ae58065803ec3693142cdc859e0f236bade25
-
Size
904KB
-
MD5
a4b64a18ff8998f2d9482b2925af2edc
-
SHA1
a5f1988c24d0171b9cab6024370c890cddf79c18
-
SHA256
9deeefd04b57e35c28f7b7bd1a2ae58065803ec3693142cdc859e0f236bade25
-
SHA512
26693b01f463a3dafb2c87dd8b3a3d65c01fae87dc2d914c265a022a980a91625e4b4a9ab8f5947c5167ab2fa409df04d4f544030070d1fc8e128e99db477b57
-
SSDEEP
12288:gjfNnlePEz+Nq7+fDirAayFFGQ82CIKMTroeEPv06LxGBMi:gj3eP++I7kDqA8VMAeE30pP
-
Modifies firewall policy service
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Create or Modify System Process
1Windows Service
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
3Disable or Modify Tools
3Modify Registry
5