General
- Target f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b.exe
- Size 169KB
- Sample251229-zhmb9asmcp
- SHA256 f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b
- MD5 65f056f2f52911ac3558a28d387f87b7
- SHA1 38017bb5a74e2013aa6381deec30b387efab5bf2
- SHA512 0adfc1acb01bd72361e630f88f582e7cd002a993dad67d8e3f24a6b130d0cec38f87f2062d197d3d30da8c3a3a366a6a996b97abf33460b870b1cf0663998886
- SSDEEP 1536:CeT7BVwxfvEFwjRQvm1Fu8AjYaFwjR8vm1Fu8AjYaFwjRfvm1Fp:CmVwRKCTu8ANCHu8ANCgp
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b.exe
Resource
win10ltsc2021-20251229-en
21 signatures
300 seconds
Behavioral task
behavioral2
Sample
f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b.exe
Resource
win11-20251229-en
17 signatures
300 seconds
Malware Config
Targets
-
- Target f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b.exe
- Size 169KB
- SHA256 f0f89e003fa36a828cd4bb299922f5c50695f11cda03ac5974c778ee72ee476b
- MD5 65f056f2f52911ac3558a28d387f87b7
- SHA1 38017bb5a74e2013aa6381deec30b387efab5bf2
- SHA512 0adfc1acb01bd72361e630f88f582e7cd002a993dad67d8e3f24a6b130d0cec38f87f2062d197d3d30da8c3a3a366a6a996b97abf33460b870b1cf0663998886
- SSDEEP 1536:CeT7BVwxfvEFwjRQvm1Fu8AjYaFwjR8vm1Fu8AjYaFwjRfvm1Fp:CmVwRKCTu8ANCHu8ANCgp
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects Vilsel trojan
-
Modifies visibility of file extensions in Explorer
-
Vilsel family
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2Discovery
Network Share Discovery
1Peripheral Device Discovery
1Query Registry
2System Information Discovery
3System Location Discovery
1System Language Discovery
1System Network Configuration Discovery
1Internet Connection Discovery
1System Time Discovery
1