Overview

overview

8

Static

static

3

fixer.exe

windows10-ltsc_2021-x64

8

helper.exe

windows10-ltsc_2021-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    New WinRAR archive.rar
  • Size 25.4MB
  • Sample260709-2plemsav7k
  • SHA256 e665f956d7a88c123dc0201fbbe8110ae0bbc5301da1e02992946da5aa7f301d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasionpersistenceprivilege_escalationpyinstaller

Malware Config

Targets

    • Target
      fixer.exe
    • Size 49KB
    • SHA256 873875e001213bbfbcb7a9ba953b78cd7b1fd21c491356631f315e41440a3e85
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionpersistenceprivilege_escalation

    • Drops file in Drivers directory

    • Modifies Windows Firewall

      defense_evasion

    • Loads dropped DLL

    behavioral1
    • Target
      helper.exe
    • Size 26.2MB
    • SHA256 36a45aadeb842185b8064b8f0be3730e079c9f9c125bc8be22363332969857bf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10

    • Loads dropped DLL

    behavioral2

MITRE ATT&CK Enterprise v16

Tasks