General

  • Target

    22d7f34faad3f9639b059b7019ec4be58c0feabcd2751e4e84d04a2fa2f7db15

  • Size

    811KB

  • Sample

    221124-p3txqaec52

  • MD5

    d7696d3b26a6e15cd24e738920514e1f

  • SHA1

    94ebfba1a1687e4f2b9afb3bea12ed9e10033680

  • SHA256

    22d7f34faad3f9639b059b7019ec4be58c0feabcd2751e4e84d04a2fa2f7db15

  • SHA512

    edc34ced282619df1a33a621349a96cc48bbbb535c3f615334727fcb6bbbaefbd4a8cc0b8ceb0f5de271c5740115e003581e2532d15972b97a13bfb667085f17

  • SSDEEP

    12288:cDjxPmJyxFBaEYwfpYRfD+ug7HdOJYqt16DuSoWfRJ+uDn/o/kPbmU/0tNKLw:sVmTwm1LaHd0Yqf6jfz7D/mkT3/2KLw

Malware Config

Targets

    • Target

      22d7f34faad3f9639b059b7019ec4be58c0feabcd2751e4e84d04a2fa2f7db15

    • Size

      811KB

    • MD5

      d7696d3b26a6e15cd24e738920514e1f

    • SHA1

      94ebfba1a1687e4f2b9afb3bea12ed9e10033680

    • SHA256

      22d7f34faad3f9639b059b7019ec4be58c0feabcd2751e4e84d04a2fa2f7db15

    • SHA512

      edc34ced282619df1a33a621349a96cc48bbbb535c3f615334727fcb6bbbaefbd4a8cc0b8ceb0f5de271c5740115e003581e2532d15972b97a13bfb667085f17

    • SSDEEP

      12288:cDjxPmJyxFBaEYwfpYRfD+ug7HdOJYqt16DuSoWfRJ+uDn/o/kPbmU/0tNKLw:sVmTwm1LaHd0Yqf6jfz7D/mkT3/2KLw

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks