General

  • Target

    19917b254644d1039dd31d0a488ddeeb

  • Size

    1.4MB

  • Sample

    210727-57zdqqyl4n

  • MD5

    19917b254644d1039dd31d0a488ddeeb

  • SHA1

    82e9b1379d5307314393cdfcb5063de1c88967c5

  • SHA256

    67c301f780fa02326ee7da99cc711da96daa3b76ea0851ce594e32671e747482

  • SHA512

    8d6e34537cddb40f3ea8b149b0744e6fae7a355b61949b87115b19847831947d7ce7edd954769c80f84950dcf6e9d0bc768b2e4862f5695ce32d1e758f29ce33

Score
8/10

Malware Config

Targets

    • Target

      19917b254644d1039dd31d0a488ddeeb

    • Size

      1.4MB

    • MD5

      19917b254644d1039dd31d0a488ddeeb

    • SHA1

      82e9b1379d5307314393cdfcb5063de1c88967c5

    • SHA256

      67c301f780fa02326ee7da99cc711da96daa3b76ea0851ce594e32671e747482

    • SHA512

      8d6e34537cddb40f3ea8b149b0744e6fae7a355b61949b87115b19847831947d7ce7edd954769c80f84950dcf6e9d0bc768b2e4862f5695ce32d1e758f29ce33

    Score
    8/10
    • Disables Task Manager via registry modification

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

2
T1112

Install Root Certificate

1
T1130

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks