Extracted

• • Target

    dfc31dbf4e5c1233029d8e9a9bdfc15d4fa5b08dbac745d9b73d49d5eaf8f1ae

  • Size

    93KB

  • MD5

    cda76c5daf293a188eb6d41fb9d989ca

  • SHA1

    d84c12c503c5075d6b132036753294dda0e1c400

  • SHA256

    dfc31dbf4e5c1233029d8e9a9bdfc15d4fa5b08dbac745d9b73d49d5eaf8f1ae

  • SHA512

    902caf0767009dfa3f2fd24941aa19cf905eb5f7a418e431060494e49b561c4f88da315bb97bcfd3aa1d50145f38a5f63eeae444b078eb690c545eb216e11f08

  • SSDEEP

    768:9Y3Q5yD9O/pBcxYsbae6GIXb9pDX2t98PL0OXLeuXxrjEtCdnl2pi1Rz4Rk3+sGS:P5IOx6baIa9RZj00ljEwzGi1dDaDcgS

  Score

  8^/10

  evasionpersistenceprivilege_escalation

  • Modifies Windows Firewall

    evasion

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • Drops autorun.inf file

    Malware can abuse Windows Autorun to spread further via attached volumes.

  • Drops file in System32 directory

  behavioral1behavioral2