General

  • Target

    3adca9f4d52085c2d47f928a827f3df1795ad35ef1547ad87bbb50d57618be6b

  • Size

    364KB

  • Sample

    221123-ly8njacf69

  • MD5

    baddc965d388343c0d596ec381350080

  • SHA1

    cc88ec04dbac03ec004ff8d4be75489db9762e15

  • SHA256

    3adca9f4d52085c2d47f928a827f3df1795ad35ef1547ad87bbb50d57618be6b

  • SHA512

    0f89ecd7b836460a7a90ded2912cdc995c5a6cba101afc1a03314363bc15d5e2c51ee63be5f7754cf4e6079fb9173266e48441a019603efe7e16b456c79aa701

  • SSDEEP

    6144:HyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:GMFOkbV5f0H2DeJxZaZPJ+

Malware Config

Targets

    • Target

      3adca9f4d52085c2d47f928a827f3df1795ad35ef1547ad87bbb50d57618be6b

    • Size

      364KB

    • MD5

      baddc965d388343c0d596ec381350080

    • SHA1

      cc88ec04dbac03ec004ff8d4be75489db9762e15

    • SHA256

      3adca9f4d52085c2d47f928a827f3df1795ad35ef1547ad87bbb50d57618be6b

    • SHA512

      0f89ecd7b836460a7a90ded2912cdc995c5a6cba101afc1a03314363bc15d5e2c51ee63be5f7754cf4e6079fb9173266e48441a019603efe7e16b456c79aa701

    • SSDEEP

      6144:HyXMFWRPs8OW452Q0H2DjOnJm6Zy/ZPAQ9gBf:GMFOkbV5f0H2DeJxZaZPJ+

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Tasks