General

  • Target
    5bf71e4bd6887891babfd8133b9a2d1d89a1de4e119ad4a9d964a6ddb271888a
  • Size 554KB
  • Sample260908-hsrahsdf64
  • SHA256 5bf71e4bd6887891babfd8133b9a2d1d89a1de4e119ad4a9d964a6ddb271888a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      5bf71e4bd6887891babfd8133b9a2d1d89a1de4e119ad4a9d964a6ddb271888a
    • Size 554KB
    • SHA256 5bf71e4bd6887891babfd8133b9a2d1d89a1de4e119ad4a9d964a6ddb271888a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Vilsel trojan

    • Family: Vilsel

      Vilsel is a trojan written in VisualBasic.

    • Modifies visibility of file extensions in Explorer

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks