General

  • Target

    0e403ad4ceda013df9eca13c60b5ddd4dc91597b97227fbd7860574cd5ce817b

  • Size

    318KB

  • Sample

    201112-kjscqr62ke

  • MD5

    5d5fb3353d705426b492134c55c6b48d

  • SHA1

    f761040d775eefdd56f0b5272d27438ac711d7e6

  • SHA256

    0e403ad4ceda013df9eca13c60b5ddd4dc91597b97227fbd7860574cd5ce817b

  • SHA512

    c0dbb1c7f0a3ca3980ffdda0c030e5c5e45965b6c3fad07b5254fccfdb0b5d5690a760479e253e63c5faa33b945d4bb1c49686a1ee547672862663dc9ff5e464

Malware Config

Targets

    • Target

      0e403ad4ceda013df9eca13c60b5ddd4dc91597b97227fbd7860574cd5ce817b

    • Size

      318KB

    • MD5

      5d5fb3353d705426b492134c55c6b48d

    • SHA1

      f761040d775eefdd56f0b5272d27438ac711d7e6

    • SHA256

      0e403ad4ceda013df9eca13c60b5ddd4dc91597b97227fbd7860574cd5ce817b

    • SHA512

      c0dbb1c7f0a3ca3980ffdda0c030e5c5e45965b6c3fad07b5254fccfdb0b5d5690a760479e253e63c5faa33b945d4bb1c49686a1ee547672862663dc9ff5e464

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Winlogon Helper DLL

1
T1004

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

2
T1112

Discovery

System Information Discovery

1
T1082

Tasks