General
-
Target
ADZP 20 Complex.cmd
-
Size
9KB
-
Sample
240706-3db79syhkh
-
MD5
ce356ca373a98fd657659e9cc2aa0baf
-
SHA1
c61e6156e96dad7ec06c2ccbf0bdf0f97c49e265
-
SHA256
ab1e92795c14a7ace2deef6b9f9571a4b9f1d2742c62d38e8494fbea50f836ec
-
SHA512
c8d4a8badd8a3f7017fe399d1163f210266bedfb8c80ed13b8dd652c88c074dfc4a88d9c39302b1b93d3b224e23468ba380936e6651e9d02ffa7fe9c45af1782
-
SSDEEP
192:88fvn9rD7rYVTiuIxhoAtpYAjDj8+3M8dFLwJWap3ahzKc7jF4kuWSZBxAp:BVTEJWo3yzK6
Static task
static1
Behavioral task
behavioral1
Sample
ADZP 20 Complex.cmd
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
ADZP 20 Complex.cmd
Resource
win10v2004-20240704-en
Malware Config
Targets
-
-
Target
ADZP 20 Complex.cmd
-
Size
9KB
-
MD5
ce356ca373a98fd657659e9cc2aa0baf
-
SHA1
c61e6156e96dad7ec06c2ccbf0bdf0f97c49e265
-
SHA256
ab1e92795c14a7ace2deef6b9f9571a4b9f1d2742c62d38e8494fbea50f836ec
-
SHA512
c8d4a8badd8a3f7017fe399d1163f210266bedfb8c80ed13b8dd652c88c074dfc4a88d9c39302b1b93d3b224e23468ba380936e6651e9d02ffa7fe9c45af1782
-
SSDEEP
192:88fvn9rD7rYVTiuIxhoAtpYAjDj8+3M8dFLwJWap3ahzKc7jF4kuWSZBxAp:BVTEJWo3yzK6
-
Disables Task Manager via registry modification
-
Modifies Windows Firewall
-
Possible privilege escalation attempt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Modifies file permissions
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
File and Directory Permissions Modification: Windows File and Directory Permissions Modification
-
Modifies boot configuration data using bcdedit
-
Drops autorun.inf file
Malware can abuse Windows Autorun to spread further via attached volumes.
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Defense Evasion
Impair Defenses
1Disable or Modify System Firewall
1File and Directory Permissions Modification
2Windows File and Directory Permissions Modification
1Modify Registry
1Hide Artifacts
1Hidden Files and Directories
1