General
-
Target
zoom.exe
-
Size
9.9MB
-
Sample
241102-2ap5aawqht
-
MD5
f402250a79e48d8bd930fef38592c220
-
SHA1
80d1cf2b52c58c54bfc55a303c816ada540266bb
-
SHA256
7fec036f563f41e4829910e54eca7c152f36739e54a80dfdc5d1d2c5e00dbcc2
-
SHA512
9083454566ffd50a2eed6ce8d83b16adb447be3649f21adf4b62c35795e7b6818cd01209432ed0d932746b6dd6f64fc5d92d955de3a64d0508da7c7ab2945b5d
-
SSDEEP
98304:mpbm4V9MpExwzKVaZr2bpHVsiuR/6QjWEmB2v/ZmHzU:CmTpExwmVNVsiuV6QjTZezU
Behavioral task
behavioral1
Sample
zoom.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
zoom.exe
Resource
win10v2004-20241007-en
Malware Config
Extracted
skuld
https://discord.com/api/webhooks/1300496286054613073/SVxsTwnKmhZbNX40mVWVkdeX9KOKHg_wrv2KmoWzPvx2qsLCXtHLo-52VR7DJoca64Uz
Targets
-
-
Target
zoom.exe
-
Size
9.9MB
-
MD5
f402250a79e48d8bd930fef38592c220
-
SHA1
80d1cf2b52c58c54bfc55a303c816ada540266bb
-
SHA256
7fec036f563f41e4829910e54eca7c152f36739e54a80dfdc5d1d2c5e00dbcc2
-
SHA512
9083454566ffd50a2eed6ce8d83b16adb447be3649f21adf4b62c35795e7b6818cd01209432ed0d932746b6dd6f64fc5d92d955de3a64d0508da7c7ab2945b5d
-
SSDEEP
98304:mpbm4V9MpExwzKVaZr2bpHVsiuR/6QjWEmB2v/ZmHzU:CmTpExwmVNVsiuV6QjTZezU
Score6/10-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
1