General

  • Target

    fda004ab64fedecc4edd6d67906131dc16bebf69d8825f419a2b01969382d391

  • Size

    492KB

  • Sample

    221123-na59lsbe3z

  • MD5

    1f95672a8a94aef26f0fec7fb350e339

  • SHA1

    fe795dc9fd9dfa2b3430d4035e92798390b110ac

  • SHA256

    fda004ab64fedecc4edd6d67906131dc16bebf69d8825f419a2b01969382d391

  • SHA512

    c70925a255dcdeb460435a222e71113fbf7398ff2c95a7220e2277f148946ad79d4db9c1981facbe41bc0624c62adf3fca0edd515ac78e2600e1a4acb025331c

  • SSDEEP

    6144:vNc0p9tqViYN5CmV9Cd11lhR/+Dle/SwR00/evXW+rJN/JyyefTNCRC67QtVwG:iCWpDxVql+D6SwqfrtNJDaCk67QtV

Malware Config

Targets

    • Target

      fda004ab64fedecc4edd6d67906131dc16bebf69d8825f419a2b01969382d391

    • Size

      492KB

    • MD5

      1f95672a8a94aef26f0fec7fb350e339

    • SHA1

      fe795dc9fd9dfa2b3430d4035e92798390b110ac

    • SHA256

      fda004ab64fedecc4edd6d67906131dc16bebf69d8825f419a2b01969382d391

    • SHA512

      c70925a255dcdeb460435a222e71113fbf7398ff2c95a7220e2277f148946ad79d4db9c1981facbe41bc0624c62adf3fca0edd515ac78e2600e1a4acb025331c

    • SSDEEP

      6144:vNc0p9tqViYN5CmV9Cd11lhR/+Dle/SwR00/evXW+rJN/JyyefTNCRC67QtVwG:iCWpDxVql+D6SwqfrtNJDaCk67QtV

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Disabling Security Tools

2
T1089

Modify Registry

3
T1112

Tasks