General

  • Target

    2e98b03ec689fbc8392e250e8c9371cde06386095e60562066437129a3c0a0e5

  • Size

    175KB

  • Sample

    210513-dxhp3fhfcs

  • MD5

    bc67dd5095bdea216cbcd59a16c39939

  • SHA1

    01d73460d212cae2749a18cc810bd2c608e96a6e

  • SHA256

    2e98b03ec689fbc8392e250e8c9371cde06386095e60562066437129a3c0a0e5

  • SHA512

    393d2f2c14cbeb8fe65129964d2f57b14fc19c9fc47044664d525baf32e6b03437872bbd9e43a91cf120cba0a8d8c049d73151af8c76efe08a40e57fbb1a7ad5

Score
6/10

Malware Config

Targets

    • Target

      2e98b03ec689fbc8392e250e8c9371cde06386095e60562066437129a3c0a0e5

    • Size

      175KB

    • MD5

      bc67dd5095bdea216cbcd59a16c39939

    • SHA1

      01d73460d212cae2749a18cc810bd2c608e96a6e

    • SHA256

      2e98b03ec689fbc8392e250e8c9371cde06386095e60562066437129a3c0a0e5

    • SHA512

      393d2f2c14cbeb8fe65129964d2f57b14fc19c9fc47044664d525baf32e6b03437872bbd9e43a91cf120cba0a8d8c049d73151af8c76efe08a40e57fbb1a7ad5

    Score
    6/10
    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Tasks