General

  • Target
    6f2f7758c8ae920786a0044b4d1fc6ea6f2ab2c83e16b06bd96a94d1492cc663
  • Size 554KB
  • Sample260908-j56fmsfr7w
  • SHA256 6f2f7758c8ae920786a0044b4d1fc6ea6f2ab2c83e16b06bd96a94d1492cc663
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      6f2f7758c8ae920786a0044b4d1fc6ea6f2ab2c83e16b06bd96a94d1492cc663
    • Size 554KB
    • SHA256 6f2f7758c8ae920786a0044b4d1fc6ea6f2ab2c83e16b06bd96a94d1492cc663
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Vilsel trojan

    • Family: Vilsel

      Vilsel is a trojan written in VisualBasic.

    • Modifies visibility of file extensions in Explorer

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks