Overview

overview

10

task1

 

7

task2

 

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    amix
  • Size 925KB
  • Sample190902-3ldbs4wjda
  • SHA256 d95a38a7c3ba130e354926102de8f64986d8248ee095e5e410d6ee410d74e0bc
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      amix
    • Size 925KB
    • SHA256 d95a38a7c3ba130e354926102de8f64986d8248ee095e5e410d6ee410d74e0bc
    • MD5 SHA1 SHA512
    Score
    10/10

    • Suspicious use of NtCreateUserProcessOtherParentProcess

    • Loads dropped DLL

    • Program crash

    • Adds Run entry to start application

      persistence

    • Checks system information in the registry (likely anti-VM)

    task1task2

MITRE ATT&CK Enterprise v6

Tasks