28aeaf7ce21b286c84d6462435bfeb60f97a57b875691dde4f2936b6c3f23684

Sharing

Copy URL

Twitter E-mail

General

Target

gr7e2u08.rar
Size

446KB
Sample

240914-p9lvpavdqp
MD5

4f416671e1045824198b4608b51ab7e4
SHA1

4cb1d59215f53a35e12a99b9ffdea44902fe6c5a
SHA256

28aeaf7ce21b286c84d6462435bfeb60f97a57b875691dde4f2936b6c3f23684
SHA512

e7411a260707dcf13c8b6d0bb83670edc04dd218cf7081e3fbb86d911bfe62214f4791538914cb16eb630a8f0095d8bde59000b9df1fa8accb5f43bf12309862
SSDEEP

12288:kBxEZBLvr5YksjahgoOLWNTmgklG7XlXPdNxCvNLseMzzbMClm:CxE75xFQaN6G7xxClAFU

Score

10^/10

Malware Config

Targets

- Target
  
  gr7e2u08.rar
- Size
  
  446KB
- MD5
  
  4f416671e1045824198b4608b51ab7e4
- SHA1
  
  4cb1d59215f53a35e12a99b9ffdea44902fe6c5a
- SHA256
  
  28aeaf7ce21b286c84d6462435bfeb60f97a57b875691dde4f2936b6c3f23684
- SHA512
  
  e7411a260707dcf13c8b6d0bb83670edc04dd218cf7081e3fbb86d911bfe62214f4791538914cb16eb630a8f0095d8bde59000b9df1fa8accb5f43bf12309862
- SSDEEP
  
  12288:kBxEZBLvr5YksjahgoOLWNTmgklG7XlXPdNxCvNLseMzzbMClm:CxE75xFQaN6G7xxClAFU
Score

3^/10
behavioral1 behavioral2
- Target
  
  gr7e2u08/Defender_Settings.vbs
- Size
  
  313B
- MD5
  
  b0bf0a477bcca312021177572311e666
- SHA1
  
  ea77332d7779938ae8e92ad35d6dea4f4be37a92
- SHA256
  
  af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9
- SHA512
  
  09366608f2670d2eb0e8ddcacd081a7b2d7b680c4cdd02494d08821dbdf17595b30e88f6ce0888591592e7caa422414a895846a268fd63e8243074972c9f52d8
Score

3^/10
behavioral3 behavioral4
- Target
  
  gr7e2u08/ReadMe.txt
- Size
  
  2KB
- MD5
  
  8dbe87a9bf6342c4e2ea406fa86e76bb
- SHA1
  
  35fe083b3f5793fe1b803d091262e4dee2cd0c4d
- SHA256
  
  d3b0219253a58ccb394559751299bd16dba1120e02cb11571c3b6a085b1027f8
- SHA512
  
  3fca076f1c6fe286bef4d211fad2643e2c2e426d75e665c1a1c8dd241689fbd3911544b90f65e0b2ab25ce0ff63fc5520684ff7c1c2fb71be9cda6359a8b1c8e
Score

1^/10
behavioral5 behavioral6
- Target
  
  gr7e2u08/dControl.exe
- Size
  
  447KB
- MD5
  
  58008524a6473bdf86c1040a9a9e39c3
- SHA1
  
  cb704d2e8df80fd3500a5b817966dc262d80ddb8
- SHA256
  
  1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326
- SHA512
  
  8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31
- SSDEEP
  
  6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD
Score

10^/10

discovery evasion trojan upx
- Modifies security service
  evasion
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Windows security modification
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
behavioral7 behavioral8
- Target
  
  out.upx
- Size
  
  653KB
- MD5
  
  6970ea0b6597dcd5b4f5f19f28e958a8
- SHA1
  
  a0130bb7ac03ec4799c90781ca93fd1392c6d54c
- SHA256
  
  481e03978ca339ce697252895efe89b09fefd3098ad247d24eeb6cca9969f553
- SHA512
  
  bc95cbe9a050e3d3b713745ef399bf2817d38f8e019f6edffdd2bf755badbde766e434e39a7f32356125bba0692b694c18da8dd0762aac0c9430d45acb215e01
- SSDEEP
  
  12288:nkxDoouVA2nxKkhEvdRgQriDJOIlW+yBGQowlNCWS:RRmJkioQrilOIc+yMx
Score

1^/10
behavioral10 behavioral9
- Target
  
  gr7e2u08/dControl.ini
- Size
  
  85KB
- MD5
  
  05450ff06366ae22654b63a6e27d1624
- SHA1
  
  11453c370f41287fb6339e509bb9d3c91842b379
- SHA256
  
  8e9a84da243905685ca77b6ef71841e610b88b7963d4de59f6dcbdd1621ecacd
- SHA512
  
  ee0a9605b566aa89c8c9b260e1d9c15aecbd6cddc2df47fe24ef2cafbe8923b3e025bd5cd3d34499292589a3c094dd796ab4560c8099bad2051a54928c37b4b2
- SSDEEP
  
  768:i/G+NmPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:1+NyjsxkKdkJdULgbWSO
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies security service

UPX packed file

Windows security modification

AutoIT Executable

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12