General
- Target RAE.exe
- Size 2KB
- Sample260718-twragafw7l
- SHA256 7ae55d72622b3952443e7063e32abed95b6a36c4c214c576ed4d9464545b351e
- MD5 2e3b2d97b7f88191d07d90534477e362
- SHA1 e410eb4c1c4bdd7dca8d471e56de96560f0d30af
- SHA512 7c84c12021f4c5fd92fcc76cef6615487a44ba9625fe3af0aa3dc3844be347b161c758b29d7f134160d2fdcc7092c04da6290788501f515ebc4edaef5ffa06b4
- TLSH T174510A111D834C6C66ECE7D2786194F7EE3BB3851F14E58C2A4102D1D8967E2EC8E9EC
- MD5 SHA1 SHA512 TLSH
Static task
static1
Malware Config
Targets
-
- Target RAE.exe
- Size 2KB
- SHA256 7ae55d72622b3952443e7063e32abed95b6a36c4c214c576ed4d9464545b351e
- MD5 2e3b2d97b7f88191d07d90534477e362
- SHA1 e410eb4c1c4bdd7dca8d471e56de96560f0d30af
- SHA512 7c84c12021f4c5fd92fcc76cef6615487a44ba9625fe3af0aa3dc3844be347b161c758b29d7f134160d2fdcc7092c04da6290788501f515ebc4edaef5ffa06b4
- TLSH T174510A111D834C6C66ECE7D2786194F7EE3BB3851F14E58C2A4102D1D8967E2EC8E9EC
- MD5 SHA1 SHA512 TLSH
-
Possible privilege escalation attempt
-
Modifies file permissions
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
Executes a VBScript file via the Windows Script Host.