Overview

overview

3

Static

static

3

win64/dnsc...xy.exe

windows10-2004-x64

1

win64/dnsc...xy.exe

windows11-ltsc_2024-x64

1

win64/serv...ll.bat

windows10-2004-x64

3

win64/serv...ll.bat

windows11-ltsc_2024-x64

3

win64/serv...rt.bat

windows10-2004-x64

3

win64/serv...rt.bat

windows11-ltsc_2024-x64

3

win64/serv...ll.bat

windows10-2004-x64

3

win64/serv...ll.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    15f0c8f1f40620a54ddfd8752c327dabe1146f84618d68874f79c4f52490b396
  • Size 4.5MB
  • Sample260718-vxselagx5j
  • SHA256 15f0c8f1f40620a54ddfd8752c327dabe1146f84618d68874f79c4f52490b396
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
execution

Malware Config

Targets

    • Target
      win64/dnscrypt-proxy.exe
    • Size 11.5MB
    • SHA256 d847f834aef02f8705a649dc1060f520cdb7931d7361035728770dce2c16eeb6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      win64/service-install.bat
    • Size 992B
    • SHA256 04c1ac6ed9eea7c56c82bb78013f5f5d8ed1dd84c8b9cab8234fca552402662a
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral3behavioral4
    • Target
      win64/service-restart.bat
    • Size 1009B
    • SHA256 ce3eb0df48ab86c88d26fc0cb9f953fdef7b3ecd8be07faf402e6635a4ffb6d6
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral5behavioral6
    • Target
      win64/service-uninstall.bat
    • Size 993B
    • SHA256 85da9d303859dafd6a3cac3fee506df24020361b75ab235279a0f4dc91aa2fb5
    • MD5 SHA1 SHA512 TLSH
    Score
    3/10
    execution
    behavioral7behavioral8

MITRE ATT&CK Enterprise v16

Tasks