Overview

overview

8

Static

static

3

DriverFN_C...RP.bat

windows7-x64

8

DriverFN_C...RP.bat

windows10-2004-x64

8

DriverFN_C...AC.bat

windows7-x64

3

DriverFN_C...AC.bat

windows10-2004-x64

3

DriverFN_C...er.exe

windows7-x64

1

DriverFN_C...er.exe

windows10-2004-x64

1

DriverFN_C...er.bat

windows7-x64

1

DriverFN_C...er.bat

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    DriverFN_Cracked.zip

  • Size

    12.9MB

  • Sample

    240901-r4v8aatgpa

  • MD5

    936dfacf9fd9beae7915ef426fdd8deb

  • SHA1

    7d1816ccd8d5c1b86d1bcf553394e6d8ffebe0ac

  • SHA256

    a62b13cb228c827c16f600bf018c25fa677f5de4e3a1da892b8b2e9860f05d04

  • SHA512

    56c05f1799ca1150af91d9ce55c9ca3eb41dbc496338673c61aaf712d04810940226d086a3fb7a3ccb33b9633c32b0e78abcc60a551858617bd3838f818df38d

  • SSDEEP

    196608:dUgCyVMTB/Ixtz4W7lFOe6ajOY/ufTKPORTcwCUR/ABSqR3UdTBX14:dUXizUW7aY/sBpABjR3wNX14

Score
8/10
discoveryevasionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      DriverFN_Cracked/NETWORK/ARP.bat

    • Size

      2KB

    • MD5

      2ab1d89996c5a75ad3946cba6d8d9077

    • SHA1

      6c46e85b4e60c84f889759b27008719d5f0bcca8

    • SHA256

      a8de07f4fe140f63b574ef2d5ac1d469237bbe7fe4e8163e08ab5d62a361ebec

    • SHA512

      d32942b49e8d0b1e2ddc7433839698165a9ffd129366819e28f14ca90209ad40eca825d0c3ec60c5d1c2b438dacd17d0789713233036f35869326a57739add80

    Score
    8/10
    evasionpersistenceprivilege_escalationdiscovery

    • Modifies Windows Firewall

      evasion

    • Drops file in System32 directory

    behavioral1behavioral2

    • Target

      DriverFN_Cracked/NETWORK/MAC.bat

    • Size

      1KB

    • MD5

      c59b3336cbfcdadf5caa920eee90b780

    • SHA1

      d0b413147d681fa116d3185224f63977933ffd60

    • SHA256

      c47cf7d4c20c531aae1ba88eb5ac9462820e5e6483a4b574a59d600bbd09c379

    • SHA512

      0cc84604a8a01289e2abf86e2b6afa0cf011f12122a15312ac5dc17ab1f1287f6d954e71bc646a336a7666de594373efd71d1ab2288e98bbc392699e9f03d6cc

    Score
    3/10
    persistenceprivilege_escalation
    behavioral3behavioral4

    • Target

      DriverFN_Cracked/Perm Spoofer.exe

    • Size

      14.3MB

    • MD5

      9011e2ff294c44315082f7060627017a

    • SHA1

      01ff8440fe3ad7c1b112d18f7944bab7d5d2cefa

    • SHA256

      816dbbba6daa8418686599d28ceee99d885ecbf4a6504e71fb288b3cdf51683d

    • SHA512

      c7355b80941042a12a0232310265a826599ccce3864054d69ac0908c490766628d392a29a388b89c4c2ae3c149874d31e4196002401d8d439a8548071fe4b61c

    • SSDEEP

      196608:mJmqCyLvxKIsWfzjoiJrtMqq+Vq4l+XLu3Qb7qqUc/kNmyKm2iVAdaWX5YaIeLby:mnxnZL8iJIWlOrUYOmyKPXJt1fNtjK

    Score
    1/10
    behavioral5behavioral6

    • Target

      DriverFN_Cracked/Serials Checker/Serials Checker.bat

    • Size

      403B

    • MD5

      4d39b88edb3ed7282a587c4805928ecd

    • SHA1

      a7399a397a341f6e7048c4376faba21ed4e4a87c

    • SHA256

      e4d3e8598d39e70e7005292a9594a90af6ed91488670d47998d8a8f248f7ce9e

    • SHA512

      c9607fed93087b6f2d97c5101afc2b6a0410f94f6cf40443efebb811fab7773dc4c529c0214850dae8b0c38b0287fe9cd5b6ecec400a41eb8f1b06facdc40253

    Score
    1/10
    behavioral7behavioral8

MITRE ATT&CK Enterprise v15

Tasks