Overview

overview

8

Static

static

3

Debug/net8...pp.exe

windows10-2004-x64

1

Debug/net8...pp.exe

windows11-ltsc_2024-x64

1

Debug/net8...pp.exe

windows10-2004-x64

8

Debug/net8...pp.exe

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    12321.rar
  • Size 329KB
  • Sample260806-gpmmgsga79
  • SHA256 f3da1c7791ec57f2377ebeb96072872ea9aea348f430a404124a769f21a72fb7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
persistence

Malware Config

Targets

    • Target
      Debug/net8.0-windows/PrankApp.dll
    • Size 583KB
    • SHA256 dc94bef99593434c7ade8ee194f747d44a782d652e07e6c735bcc380fcbc0c4f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1behavioral2
    • Target
      Debug/net8.0-windows/PrankApp.exe
    • Size 148KB
    • SHA256 801a6f5ec9181834c5b868c46ef6be2cdf42f0471691e331b6cad3e5da54e0d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    persistence

    • Uses Session Manager for persistence

      Creates Session Manager registry key to run executable early in system boot.

      persistence

    • Drops file in System32 directory

    behavioral3behavioral4

MITRE ATT&CK Enterprise v16

Tasks