General

  • Target
    2ffcc18910a798d7f8c3188bf1c32c30f4ccf8dcd4276bc4226eb47538971e77
  • Size 521KB
  • Sample260910-n5wnnasfjf
  • SHA256 2ffcc18910a798d7f8c3188bf1c32c30f4ccf8dcd4276bc4226eb47538971e77
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      2ffcc18910a798d7f8c3188bf1c32c30f4ccf8dcd4276bc4226eb47538971e77
    • Size 521KB
    • SHA256 2ffcc18910a798d7f8c3188bf1c32c30f4ccf8dcd4276bc4226eb47538971e77
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Detects Vilsel trojan

    • Family: Vilsel

      Vilsel is a trojan written in VisualBasic.

    • Modifies visibility of file extensions in Explorer

    • Disables RegEdit via registry modification

    • Executes dropped EXE

    • Network Share Discovery

      Attempt to gather information on host network.

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v16

Tasks