General

  • Target
    ConfigureDefender.exe
  • Size 2.3MB
  • Sample260811-25myea1sft
  • SHA256 bd7630b6ad94f8ed2024e5e98a24b6fedbb5f2b8a058b70c8ffeefe98a7dcca2
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ConfigureDefender.exe
    • Size 2.3MB
    • SHA256 bd7630b6ad94f8ed2024e5e98a24b6fedbb5f2b8a058b70c8ffeefe98a7dcca2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Executes dropped EXE

    • Loads dropped DLL

    • AutoIT Executable

      AutoIT scripts compiled to PE executables.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      $PLUGINSDIR/System.dll
    • Size 12KB
    • SHA256 8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      $PLUGINSDIR/nsRandom.dll
    • Size 21KB
    • SHA256 db267d9920395b4badc48de04df99dfd21d579480d103cae0f48e6578197ff73
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    5/10
    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Target
      $_0_/ConfigureDefender_x64.exe
    • Size 1.8MB
    • SHA256 4d73fbd57fa5552872810647ace636e099a0daa420e99e57d0864bb53fd12422
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      $_0_/ConfigureDefender_x86.exe
    • Size 1.7MB
    • SHA256 b2a907b2eef41c95bd9105057b7f1f02206d3461f109215fca42d62d3c203c46
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks