Overview

overview

8

Static

static

3

framework_...rs.dll

windows10-2004-x64

1

framework_...rs.bat

windows10-2004-x64

8

framework_...rs.bat

windows11-ltsc_2024-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    framework_sensors_0.0.0.6_EVCert_Debug.zip
  • Size 320KB
  • Sample261102-nywp3seh58
  • SHA256 0a458bdcba66fe2081aa0d9bd954055e0b57896fe7cebff068add7ddffa444c2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
execution

Malware Config

Targets

    • Target
      framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.dll
    • Size 64KB
    • SHA256 7c1d0d54f02c156085fba667c8b307f00aca82f17060531286d0559f4dc7f564
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    behavioral1
    • Target
      framework_sensors_0.0.0.6_EVCert_Debug/install_frameworksensors.bat
    • Size 878B
    • SHA256 a91a752c9917b941158a951ef097007940f59b84a51bbec814a517c6c55aed4a
    • MD5 SHA1 SHA512 TLSH
    Score
    8/10
    execution

    • Manipulates Digital Signatures

      Attackers can apply techniques such as changing the registry keys of authenticode & Cryptography to make their binary seem validly signed.

    • Drops file in System32 directory

    behavioral2behavioral3

MITRE ATT&CK Enterprise v16

Tasks