Overview

overview

8

Static

static

3

Drv_ceo_12...64.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    Drv_ceo_12.8.1_x64.exe
  • Size 14.6MB
  • Sample260808-st1kpaeb52
  • SHA256 0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoveryexecutioninstallerransomware

Malware Config

Targets

    • Target
      Drv_ceo_12.8.1_x64.exe
    • Size 14.6MB
    • SHA256 0d4755125431b2df6a5232950b6c475bb6ae459a35503d64a6bc2c8075f5e2e5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    discoveryexecutionransomware

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

      execution

    • Executes dropped EXE

    • Loads dropped DLL

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks