General

  • Target

    813350f00ab4c12b12ef8c951b6f7c74423f625fb04a8188e0b0036754767b5b

  • Size

    793KB

  • Sample

    221124-h8exesgf39

  • MD5

    a82e9aefa7e07f62403c9b2b684e4c85

  • SHA1

    35590c687727e637dd30044f9d911a5cf2ab930d

  • SHA256

    813350f00ab4c12b12ef8c951b6f7c74423f625fb04a8188e0b0036754767b5b

  • SHA512

    2c1079bd43fe32fdce92a11b66469147710cf39ec28333df7227ad68313f588b38d2effe00c57d33d71db9b14080b5a73f9309237a198e17f617e5f39771de3d

  • SSDEEP

    12288:7TE+nysqh+D3qzbj4adPr6QAiVBPJSU0Z+ZY2qeTrL6Os0+kDcVcz8kZ:7PQh+D3Cj4adPBBKkJVs0+kDXBZ

Malware Config

Targets

    • Target

      813350f00ab4c12b12ef8c951b6f7c74423f625fb04a8188e0b0036754767b5b

    • Size

      793KB

    • MD5

      a82e9aefa7e07f62403c9b2b684e4c85

    • SHA1

      35590c687727e637dd30044f9d911a5cf2ab930d

    • SHA256

      813350f00ab4c12b12ef8c951b6f7c74423f625fb04a8188e0b0036754767b5b

    • SHA512

      2c1079bd43fe32fdce92a11b66469147710cf39ec28333df7227ad68313f588b38d2effe00c57d33d71db9b14080b5a73f9309237a198e17f617e5f39771de3d

    • SSDEEP

      12288:7TE+nysqh+D3qzbj4adPr6QAiVBPJSU0Z+ZY2qeTrL6Os0+kDcVcz8kZ:7PQh+D3Cj4adPBBKkJVs0+kDXBZ

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks