General

  • Target
    zadig-2.9.exe
  • Size 5.1MB
  • Sample260623-eng99sav9x
  • SHA256 4ecaa95df3da3621486a043aef8b3050b8bafe7c901402871e816229ef82039b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      zadig-2.9.exe
    • Size 5.1MB
    • SHA256 4ecaa95df3da3621486a043aef8b3050b8bafe7c901402871e816229ef82039b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks