Resubmissions

30/11/2024, 13:33

241130-qtt2ssvnht10

30/11/2024, 12:40

241130-pwfrhsykgj10

30/11/2024, 01:05

241130-bfj74svnf110

30/11/2024, 01:04

241130-bfebvszlbl10

29/11/2024, 02:23

241129-cvhs9svpep10

28/11/2024, 20:40

241128-zftnjsvqer10

28/11/2024, 15:00

241128-sdtgfa1let10

28/11/2024, 02:05

241128-chyzqawqbm10

28/11/2024, 00:14

241128-ajcf1asraj10

27/11/2024, 23:38

241127-3m3rks1rcr10

General

  • Target
    nezurr.exe
  • Size 7.5MB
  • Sample241128-sdtgfa1let
  • SHA256 f4d4286a5b93621dac280247aa449c39a018aa4295e6f2c6a8dc80dfcfa64bf7
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      nezurr.exe
    • Size 7.5MB
    • SHA256 f4d4286a5b93621dac280247aa449c39a018aa4295e6f2c6a8dc80dfcfa64bf7
    • MD5 SHA1 SHA512 SSDEEP
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks