General

  • Target

    14007fd206b747305392b9f8712afab5dd14b2efe4e62a0e26a4e8df6933fd67.bin

  • Size

    257KB

  • Sample

    210225-82lyzzn9pj

  • MD5

    f56e80ea9e01670963449ac451af7510

  • SHA1

    7bf3a3bda2c0d6ef24dabd49c18d6da70957517f

  • SHA256

    14007fd206b747305392b9f8712afab5dd14b2efe4e62a0e26a4e8df6933fd67

  • SHA512

    53200aef8c9635c1069e0d364404172c52e1a6e9a6185c61b383e94dcf761e8ded5663982cf67d768c87879346862b07e0d7a7161b442e5b3234b553543067ab

Malware Config

Targets

    • Target

      14007fd206b747305392b9f8712afab5dd14b2efe4e62a0e26a4e8df6933fd67.bin

    • Size

      257KB

    • MD5

      f56e80ea9e01670963449ac451af7510

    • SHA1

      7bf3a3bda2c0d6ef24dabd49c18d6da70957517f

    • SHA256

      14007fd206b747305392b9f8712afab5dd14b2efe4e62a0e26a4e8df6933fd67

    • SHA512

      53200aef8c9635c1069e0d364404172c52e1a6e9a6185c61b383e94dcf761e8ded5663982cf67d768c87879346862b07e0d7a7161b442e5b3234b553543067ab

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Modify Existing Service

2
T1031

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Bypass User Account Control

1
T1088

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

5
T1112

Disabling Security Tools

2
T1089

Bypass User Account Control

1
T1088

Discovery

System Information Discovery

1
T1082

Tasks