General

  • Target

    ChadCracker2.0.exe

  • Size

    14.0MB

  • Sample

    241120-t24sraygqg

  • MD5

    fd08e6e958f1dde947a3fa63a3aa51b0

  • SHA1

    e5049eaeaf1ea0053c7cf76eda8fe81a52a59d09

  • SHA256

    a76c560eddc44c9ed4dee8a7ed35e0cd7e4c23d72d6b1630e7b7037605dbe634

  • SHA512

    eea0a8b8b329aafa5641a7f72f08e1d2ea5aa23ee15b19b47d9e22a945f0d68560fd77b1164afe6ccb64459050b7b40ba4d929d15677d71ef10e5e4eb47d47e1

  • SSDEEP

    393216:GbM0WSTLk+/n3o+FzrDYcq7vFQ//jL5QQaGzU6VQV:g9k+/n3o+FnDYZ7NcL7aGzHa

Malware Config

Targets

    • Target

      ChadCracker2.0.exe

    • Size

      14.0MB

    • MD5

      fd08e6e958f1dde947a3fa63a3aa51b0

    • SHA1

      e5049eaeaf1ea0053c7cf76eda8fe81a52a59d09

    • SHA256

      a76c560eddc44c9ed4dee8a7ed35e0cd7e4c23d72d6b1630e7b7037605dbe634

    • SHA512

      eea0a8b8b329aafa5641a7f72f08e1d2ea5aa23ee15b19b47d9e22a945f0d68560fd77b1164afe6ccb64459050b7b40ba4d929d15677d71ef10e5e4eb47d47e1

    • SSDEEP

      393216:GbM0WSTLk+/n3o+FzrDYcq7vFQ//jL5QQaGzU6VQV:g9k+/n3o+FnDYZ7NcL7aGzHa

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks