e44e001e305f340101bd0b72530d789640ce7914f459e5a28feb0b56082d6de2

Sharing

Copy URL

Twitter E-mail

General

Target

30102024.rar
Size

446KB
Sample

241219-3gspestlgk
MD5

3426e3bc35fdca3bbf4202e7046ef109
SHA1

def0dcba3b14da1ec4549e18dd403304a7e675b5
SHA256

e44e001e305f340101bd0b72530d789640ce7914f459e5a28feb0b56082d6de2
SHA512

f142f05d961e6162849ee794d4cedbe33f988e8d85c08baf8329ad3d2e1fd61e051788fbff9e8aa4564df88e10463f27562520e9b8030a152bec88bcad207795
SSDEEP

12288:c3JfQGCZ4MZqcTTCLaS+cSN4W4rEE/huD:c3J6Z42O+cSN4W4rEghuD

Score

10^/10

Malware Config

Targets

- Target
  
  30102024.rar
- Size
  
  446KB
- MD5
  
  3426e3bc35fdca3bbf4202e7046ef109
- SHA1
  
  def0dcba3b14da1ec4549e18dd403304a7e675b5
- SHA256
  
  e44e001e305f340101bd0b72530d789640ce7914f459e5a28feb0b56082d6de2
- SHA512
  
  f142f05d961e6162849ee794d4cedbe33f988e8d85c08baf8329ad3d2e1fd61e051788fbff9e8aa4564df88e10463f27562520e9b8030a152bec88bcad207795
- SSDEEP
  
  12288:c3JfQGCZ4MZqcTTCLaS+cSN4W4rEE/huD:c3J6Z42O+cSN4W4rEghuD
Score

1^/10
behavioral1 behavioral2
- Target
  
  30102024/Defender_Settings.vbs
- Size
  
  313B
- MD5
  
  b0bf0a477bcca312021177572311e666
- SHA1
  
  ea77332d7779938ae8e92ad35d6dea4f4be37a92
- SHA256
  
  af42a17d428c8e9d6f4a6d3393ec268f4d12bbfd01a897d87275482a45c847e9
- SHA512
  
  09366608f2670d2eb0e8ddcacd081a7b2d7b680c4cdd02494d08821dbdf17595b30e88f6ce0888591592e7caa422414a895846a268fd63e8243074972c9f52d8
Score

3^/10
behavioral3 behavioral4
- Target
  
  30102024/ReadMe.txt
- Size
  
  2KB
- MD5
  
  8dbe87a9bf6342c4e2ea406fa86e76bb
- SHA1
  
  35fe083b3f5793fe1b803d091262e4dee2cd0c4d
- SHA256
  
  d3b0219253a58ccb394559751299bd16dba1120e02cb11571c3b6a085b1027f8
- SHA512
  
  3fca076f1c6fe286bef4d211fad2643e2c2e426d75e665c1a1c8dd241689fbd3911544b90f65e0b2ab25ce0ff63fc5520684ff7c1c2fb71be9cda6359a8b1c8e
Score

1^/10
behavioral5 behavioral6
- Target
  
  30102024/dControl.exe
- Size
  
  447KB
- MD5
  
  58008524a6473bdf86c1040a9a9e39c3
- SHA1
  
  cb704d2e8df80fd3500a5b817966dc262d80ddb8
- SHA256
  
  1ef6c1a4dfdc39b63bfe650ca81ab89510de6c0d3d7c608ac5be80033e559326
- SHA512
  
  8cf492584303523bf6cdfeb6b1b779ee44471c91e759ce32fd4849547b6245d4ed86af5b38d1c6979729a77f312ba91c48207a332ae1589a6e25de67ffb96c31
- SSDEEP
  
  6144:Vzv+kSn74iCmfianQGDM3OXTWRDy9GYQDUmJFXIXHrsUBnBTF8JJCYrYNsQJzfgu:Vzcn7EanlQiWtYhmJFSwUBLcQZfgiD
Score

10^/10

discovery evasion trojan upx
- Modifies security service
  evasion
- Windows security modification
  evasion trojan
- AutoIT Executable
  AutoIT scripts compiled to PE executables.
- Drops file in System32 directory
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral7 behavioral8
- Target
  
  out.upx
- Size
  
  653KB
- MD5
  
  6970ea0b6597dcd5b4f5f19f28e958a8
- SHA1
  
  a0130bb7ac03ec4799c90781ca93fd1392c6d54c
- SHA256
  
  481e03978ca339ce697252895efe89b09fefd3098ad247d24eeb6cca9969f553
- SHA512
  
  bc95cbe9a050e3d3b713745ef399bf2817d38f8e019f6edffdd2bf755badbde766e434e39a7f32356125bba0692b694c18da8dd0762aac0c9430d45acb215e01
- SSDEEP
  
  12288:nkxDoouVA2nxKkhEvdRgQriDJOIlW+yBGQowlNCWS:RRmJkioQrilOIc+yMx
Score

1^/10
behavioral10 behavioral9
- Target
  
  30102024/dControl.ini
- Size
  
  86KB
- MD5
  
  f562c447812aea71ea3caa93b7252fff
- SHA1
  
  3e67cee59da2c2a6e667c04741b6ec93dcb99f8c
- SHA256
  
  951f17bb65a39011eced7274da19940c9ddf062a7f6cb4951d4982c9c1efb310
- SHA512
  
  52fab124af1d7ac2fabbe4294593abcc7479bbf680e2fd7360c8b69a25681b015de71d5ec5297bfd429c74761cc87a581ab9ba6d19a45e4a76b921f2c3f88d3f
- SSDEEP
  
  768:i/oizrPfjsxaxdk2akexodULxEQq1wIgC+AEbSr6:fiz7jsxkKdkJdULgbWSO
Score

1^/10
behavioral11 behavioral12

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Create or Modify System Process

T1543

Windows Service

T1543.003

Privilege Escalation

Create or Modify System Process

T1543

Windows Service

T1543.003

Defense Evasion

Impair Defenses

T1562

Disable or Modify Tools

T1562.001

Modify Registry

T1112

Credential Access

Discovery

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Modifies security service

Windows security modification

AutoIT Executable

Drops file in System32 directory

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12