General

  • Target

    2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock

  • Size

    208KB

  • Sample

    240609-p4nr4aag5v

  • MD5

    8706fa98bcafd7c8dd9371cfa5e276ce

  • SHA1

    0ad85ca2a9fe713a2653714455c53053979a7fdf

  • SHA256

    aeafa89878bf1bf20f74243b4fc8bd37a53e03745238c0fe587fa4025e45bd5f

  • SHA512

    f4f542dd77be41691d31b2b5fcdc034771146dc5d8bf5f7b92ed0ad1cb5372cd8b4947ec908ec5a192551fa1b1d19d848c261d1f96f77538c19147da96d32bae

  • SSDEEP

    3072:PoWje0y9cn8qcJZceaBUn/8RdHnif0jDl0ocCLWGg/Wc5GAce+39oB:PoDP2jTdHne0vyCA95GAc539

Malware Config

Targets

    • Target

      2024-06-09_8706fa98bcafd7c8dd9371cfa5e276ce_virlock

    • Size

      208KB

    • MD5

      8706fa98bcafd7c8dd9371cfa5e276ce

    • SHA1

      0ad85ca2a9fe713a2653714455c53053979a7fdf

    • SHA256

      aeafa89878bf1bf20f74243b4fc8bd37a53e03745238c0fe587fa4025e45bd5f

    • SHA512

      f4f542dd77be41691d31b2b5fcdc034771146dc5d8bf5f7b92ed0ad1cb5372cd8b4947ec908ec5a192551fa1b1d19d848c261d1f96f77538c19147da96d32bae

    • SSDEEP

      3072:PoWje0y9cn8qcJZceaBUn/8RdHnif0jDl0ocCLWGg/Wc5GAce+39oB:PoDP2jTdHne0vyCA95GAc539

    • Modifies visibility of file extensions in Explorer

    • UAC bypass

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks