General

  • Target

    69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd

  • Size

    384KB

  • Sample

    221123-lyeqfsfh91

  • MD5

    707d0897c58feb3c53e08d67981b706a

  • SHA1

    e6840e5d801d20272796bb6f2321bf6b7e16465a

  • SHA256

    69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd

  • SHA512

    07b6299afa68f765058ca8a68049bc9a6d9ab61fbfe90465aee30c86b9670ac84acb32a5f84b78a53e04a70b9fbd56528fa587693780623fef59a3bf7ca03e22

  • SSDEEP

    6144:rEojoK+xjjOMUETS9CbF+IaU/oBWg9/VfKOsyiNEt9mjYlRwxJLVXyiRm:rEo4eC9aU/X0Vi3NEvlRAXzo

Malware Config

Targets

    • Target

      69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd

    • Size

      384KB

    • MD5

      707d0897c58feb3c53e08d67981b706a

    • SHA1

      e6840e5d801d20272796bb6f2321bf6b7e16465a

    • SHA256

      69727c67f1a44d9a8d414e14f231fae165bf64e6aea9750a11a33b56daf788cd

    • SHA512

      07b6299afa68f765058ca8a68049bc9a6d9ab61fbfe90465aee30c86b9670ac84acb32a5f84b78a53e04a70b9fbd56528fa587693780623fef59a3bf7ca03e22

    • SSDEEP

      6144:rEojoK+xjjOMUETS9CbF+IaU/oBWg9/VfKOsyiNEt9mjYlRwxJLVXyiRm:rEo4eC9aU/X0Vi3NEvlRAXzo

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Tasks