General

  • Target

    68ccf9493999953a393112515205648e8f3b7268954470036fab27b7b3678f11

  • Size

    448KB

  • Sample

    221123-nbfeksgc82

  • MD5

    37a4181cb60bcae4085c92bd932773d6

  • SHA1

    a184e03ee86c3ccd06a1c16235880b37809a05f4

  • SHA256

    68ccf9493999953a393112515205648e8f3b7268954470036fab27b7b3678f11

  • SHA512

    12384713ff7a51dbe26fdf683cd03955b3cd803e5c1baf8364b98b2de9d3d9b91672502734c1954b7fdf8c56cbedb7e7deb6a16a6bc12d414a2b201303c92e55

  • SSDEEP

    6144:yI/Jb4l8A7hVgqHh9qT9gn4hutO2JPa5rAUageFaEupYseERsgVfMO1v4lXtZZCD:yIB4lP0qBEJhtKa5P0kjZVmldCH9

Malware Config

Targets

    • Target

      68ccf9493999953a393112515205648e8f3b7268954470036fab27b7b3678f11

    • Size

      448KB

    • MD5

      37a4181cb60bcae4085c92bd932773d6

    • SHA1

      a184e03ee86c3ccd06a1c16235880b37809a05f4

    • SHA256

      68ccf9493999953a393112515205648e8f3b7268954470036fab27b7b3678f11

    • SHA512

      12384713ff7a51dbe26fdf683cd03955b3cd803e5c1baf8364b98b2de9d3d9b91672502734c1954b7fdf8c56cbedb7e7deb6a16a6bc12d414a2b201303c92e55

    • SSDEEP

      6144:yI/Jb4l8A7hVgqHh9qT9gn4hutO2JPa5rAUageFaEupYseERsgVfMO1v4lXtZZCD:yIB4lP0qBEJhtKa5P0kjZVmldCH9

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks