General
- Target Desktop.zip
- Size 4.8MB
- Sample260817-sxt73scc26
- SHA256 1fce58ffe0128534abafeb30ae89422bb6ab648b5e88324bf4348462879e4db9
Score
10/10
Malware Config
Targets
-
- Target csrss.exe
- Size 1.0MB
- SHA256 8b259e08d803f31cc8ecca85a75f5e6fd108bb15420d584afb0adc7958c939a3
Score1/10 -
- Target enkD34B.tmp.exe
- Size 3.1MB
- SHA256 f3b93c77004295029ca13aeb2880e7f0146a8ceadee0ce9198ce69ebef8a744e
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
- Target enkD34C.tmp.exe
- Size 3.2MB
- SHA256 fe9ece31049bf0458628efc5f7af5c8b925c11e00d04d6abc6b15bcb300d8748
Score10/10-
Detects Coffloader
-
Family: Coffloader
Coffloader is an open-source beacon loader written in C.
-
Command and Scripting Interpreter: PowerShell
Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Mark of the Web detected: This indicates that the page was originally saved or cloned.
-
- Target smss.exe
- Size 1.0MB
- SHA256 8b259e08d803f31cc8ecca85a75f5e6fd108bb15420d584afb0adc7958c939a3
Score1/10