General

  • Target

    2d243f2d47e2a65be3c81fc6ffc4faa34b8bf38234f1b6d0503f3e6c3c7446f9

  • Size

    387KB

  • Sample

    221124-mbs51aba6w

  • MD5

    d6d6d27303c3973260df1e53851c4688

  • SHA1

    ef25c92f968474881d5848ed341147056f6a5d1d

  • SHA256

    2d243f2d47e2a65be3c81fc6ffc4faa34b8bf38234f1b6d0503f3e6c3c7446f9

  • SHA512

    a3b7cba71138e3048ea083ab54df619c50c64be49e8f57074a5c5e5bbfe553eb9042ce5bb906c28978fdd346503e7893c09e9efc3da9830d0422f2981450f5b2

  • SSDEEP

    6144:10BA3khqL1bcCVENChPsvk5IEK3pVVcqNcfCMnNBEb2/Ar7:10BACqRb2UPscW3jDNcKMPEqE

Score
8/10

Malware Config

Targets

    • Target

      2d243f2d47e2a65be3c81fc6ffc4faa34b8bf38234f1b6d0503f3e6c3c7446f9

    • Size

      387KB

    • MD5

      d6d6d27303c3973260df1e53851c4688

    • SHA1

      ef25c92f968474881d5848ed341147056f6a5d1d

    • SHA256

      2d243f2d47e2a65be3c81fc6ffc4faa34b8bf38234f1b6d0503f3e6c3c7446f9

    • SHA512

      a3b7cba71138e3048ea083ab54df619c50c64be49e8f57074a5c5e5bbfe553eb9042ce5bb906c28978fdd346503e7893c09e9efc3da9830d0422f2981450f5b2

    • SSDEEP

      6144:10BA3khqL1bcCVENChPsvk5IEK3pVVcqNcfCMnNBEb2/Ar7:10BACqRb2UPscW3jDNcKMPEqE

    Score
    8/10
    • Sets file execution options in registry

    • Checks for any installed AV software in registry

    • Drops desktop.ini file(s)

    • Suspicious use of SetThreadContext

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Discovery

Security Software Discovery

1
T1063

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks