General

  • Target

    2d074f94dd796e45d156bfdca6ebcff859f0ec60ec968a6323139f91cad0b87a

  • Size

    823KB

  • Sample

    221124-n4f7ksfb8w

  • MD5

    a1d256e7b28e4f54bf19f9ab00650774

  • SHA1

    fade6b5aa994c9fb4129530a718c223a15821fc1

  • SHA256

    2d074f94dd796e45d156bfdca6ebcff859f0ec60ec968a6323139f91cad0b87a

  • SHA512

    e5793103b3bc4657cf8339b2b61f9bb1f4ea3f12024e596d511b7a22e844bd67e328db1b92051ffa9ce1ab53621532cf64a8d293b7a42844933a8f2f4b212b3b

  • SSDEEP

    12288:DhdcM0bw7fzrRoxYHVRChw6HWwzM09tOFnVcFxyOtD3hVnmCg8iRCW/hMS:DhdcGYSujgNFnVatzuCblWZMS

Malware Config

Targets

    • Target

      2d074f94dd796e45d156bfdca6ebcff859f0ec60ec968a6323139f91cad0b87a

    • Size

      823KB

    • MD5

      a1d256e7b28e4f54bf19f9ab00650774

    • SHA1

      fade6b5aa994c9fb4129530a718c223a15821fc1

    • SHA256

      2d074f94dd796e45d156bfdca6ebcff859f0ec60ec968a6323139f91cad0b87a

    • SHA512

      e5793103b3bc4657cf8339b2b61f9bb1f4ea3f12024e596d511b7a22e844bd67e328db1b92051ffa9ce1ab53621532cf64a8d293b7a42844933a8f2f4b212b3b

    • SSDEEP

      12288:DhdcM0bw7fzrRoxYHVRChw6HWwzM09tOFnVcFxyOtD3hVnmCg8iRCW/hMS:DhdcGYSujgNFnVatzuCblWZMS

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks