General
- Target 0404b0289703cf06bbe5bd64fbd62b2214e0b769cd1e7386c1772ad183d9c3d3
- Size 553KB
- Sample260909-rdms8axwfv
- SHA256 0404b0289703cf06bbe5bd64fbd62b2214e0b769cd1e7386c1772ad183d9c3d3
Score
10/10
Malware Config
Targets
-
- Target 0404b0289703cf06bbe5bd64fbd62b2214e0b769cd1e7386c1772ad183d9c3d3
- Size 553KB
- SHA256 0404b0289703cf06bbe5bd64fbd62b2214e0b769cd1e7386c1772ad183d9c3d3
Score10/10-
Detects Vilsel trojan
-
Family: Vilsel
Vilsel is a trojan written in VisualBasic.
-
Modifies visibility of file extensions in Explorer
-
Disables RegEdit via registry modification
-
Executes dropped EXE
-
Network Share Discovery
Attempt to gather information on host network.
-
UPX packed file
Detects executables packed with UPX/modified UPX open source packer.
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
2