General
-
Target
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2
-
Size
224KB
-
Sample
240926-gkhsqsterf
-
MD5
c57f68cd4de853da0d9ca4fa36e3949d
-
SHA1
cbe9bfceaf74418e9af24d82810a9d201eeaf6f6
-
SHA256
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2
-
SHA512
a8cb39fc3ebd486ecb15c11636a172ca7b53dfb04b5129f45bb7861442d868ba01dca2b8c34660c5ecaf5d6aae7a70bb4680a7ebc685b753c7c517439bafc94a
-
SSDEEP
6144:ayh2zi7a2IRcGLKZH2FaLw9hH4JdBV+UdvrEFp7hK5os:ayh2zi+2If9hH4JdBjvrEH79s
Static task
static1
Behavioral task
behavioral1
Sample
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2
-
Size
224KB
-
MD5
c57f68cd4de853da0d9ca4fa36e3949d
-
SHA1
cbe9bfceaf74418e9af24d82810a9d201eeaf6f6
-
SHA256
ce3118c68dee988676d2d6c5feda7abf979b99d1d0c8a669c699345db32efda2
-
SHA512
a8cb39fc3ebd486ecb15c11636a172ca7b53dfb04b5129f45bb7861442d868ba01dca2b8c34660c5ecaf5d6aae7a70bb4680a7ebc685b753c7c517439bafc94a
-
SSDEEP
6144:ayh2zi7a2IRcGLKZH2FaLw9hH4JdBV+UdvrEFp7hK5os:ayh2zi+2If9hH4JdBjvrEH79s
-
Detects Floxif payload
-
Event Triggered Execution: AppInit DLLs
Adversaries may establish persistence and/or elevate privileges by executing malicious content triggered by AppInit DLLs loaded into processes.
-
ACProtect 1.3x - 1.4x DLL software
Detects file using ACProtect software.
-
Loads dropped DLL
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-