General

  • Target

    ca4a0e088578f9c3738b5e5246f665b4f9a1c7a45ff28104d0a298480e694007

  • Size

    91KB

  • Sample

    240601-dr75esfh7z

  • MD5

    2ca2c3cdb69a84ad458d3d28126877f4

  • SHA1

    70979a584cf286d3ff991852503280f15e6fb8e9

  • SHA256

    ca4a0e088578f9c3738b5e5246f665b4f9a1c7a45ff28104d0a298480e694007

  • SHA512

    3ecdff07a0396d6d9c38492fffc27422df02c021012e5991a205807c20207c54e8c6829a88fa9730aa646e31e4d154d23a4ce4d01fab7a424f1556614425a6ff

  • SSDEEP

    1536:zAwEmBZ04faWmtN4nic+6G3AwEmBZ04faWmtN4nic+6GL:zGms4Eton03Gms4Eton0L

Score
10/10

Malware Config

Targets

    • Target

      ca4a0e088578f9c3738b5e5246f665b4f9a1c7a45ff28104d0a298480e694007

    • Size

      91KB

    • MD5

      2ca2c3cdb69a84ad458d3d28126877f4

    • SHA1

      70979a584cf286d3ff991852503280f15e6fb8e9

    • SHA256

      ca4a0e088578f9c3738b5e5246f665b4f9a1c7a45ff28104d0a298480e694007

    • SHA512

      3ecdff07a0396d6d9c38492fffc27422df02c021012e5991a205807c20207c54e8c6829a88fa9730aa646e31e4d154d23a4ce4d01fab7a424f1556614425a6ff

    • SSDEEP

      1536:zAwEmBZ04faWmtN4nic+6G3AwEmBZ04faWmtN4nic+6GL:zGms4Eton03Gms4Eton0L

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Detects executables built or packed with MPress PE compressor

    • Disables RegEdit via registry modification

    • Disables use of System Restore points

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks