Overview

overview

10

Static

static

5

dControl/dControl.exe

windows7-x64

10

dControl/dControl.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dControl.zip

  • Size

    446KB

  • Sample

    241129-h6n3basnhv

  • MD5

    ecb32a99a3a1be8a3bf07e76b314d1cd

  • SHA1

    b332030594101141c61f543ca1c810eba9fe54e8

  • SHA256

    1472834cfde600b52c0f0a72d5878b879d4f0dd5b32fa4e83887a38630b85d26

  • SHA512

    33f5dec0383cda9097f918227f512814928e893408c4874107d040a7bd34bce36fd8bac05892d49aa6811fb41a7c44b37520b8b01c8446ba2be344e1afc4a07a

  • SSDEEP

    6144:pUcIgFnTUsPD2ADPcbJ5G5YLynTxSYcofdfpaGyw9yEjobucvSwnBPF8rDCY9Yri:NFT5Lc95Y6ynYHofdfppn4UJctToWC/X

Score
10/10
discoveryevasiontrojanupx

Malware Config

Targets

    • Target

      dControl/dControl.exe

    • Size

      447KB

    • MD5

      58008524a6473bdf86c1040a9a9e39c3

    • SHA1

      cb704d2e8df80fd3500a5b817966dc262d80ddb8

    • SHA256

      1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326

    • SHA512

      8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31

    • SSDEEP

      6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD

    Score
    10/10
    discoveryevasiontrojanupx

    • Modifies security service

      evasion

    • Windows security modification

      evasiontrojan

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks