General

  • Target

    cddca956a433bb8b16abf74b4b45426bbcc1f24824d4b872f7514a0564f72253

  • Size

    819KB

  • Sample

    221124-p4e5yshe8w

  • MD5

    d8c3344570f8df33b446a6b0f0c18b5a

  • SHA1

    67f653cfb8eb1dff32470f70c5662b78e8effac6

  • SHA256

    cddca956a433bb8b16abf74b4b45426bbcc1f24824d4b872f7514a0564f72253

  • SHA512

    f33bf3309c3e92d69582cb99aab3c6babd4196468067407d8e60e30ee69b94865d9ec0ee04745b6a08a2382f4ed0ee079311f910d9c810d995eb21c5b4f8a68d

  • SSDEEP

    12288:FDwNIek2TwZOr+7FncVZr/LjlrsvnOP/HIgYgeplmwVTYSmO7NSDAhgyn+6ZlOYt:58rencL3mnklYgepB9mqNYUd+6ZAUb

Malware Config

Targets

    • Target

      cddca956a433bb8b16abf74b4b45426bbcc1f24824d4b872f7514a0564f72253

    • Size

      819KB

    • MD5

      d8c3344570f8df33b446a6b0f0c18b5a

    • SHA1

      67f653cfb8eb1dff32470f70c5662b78e8effac6

    • SHA256

      cddca956a433bb8b16abf74b4b45426bbcc1f24824d4b872f7514a0564f72253

    • SHA512

      f33bf3309c3e92d69582cb99aab3c6babd4196468067407d8e60e30ee69b94865d9ec0ee04745b6a08a2382f4ed0ee079311f910d9c810d995eb21c5b4f8a68d

    • SSDEEP

      12288:FDwNIek2TwZOr+7FncVZr/LjlrsvnOP/HIgYgeplmwVTYSmO7NSDAhgyn+6ZlOYt:58rencL3mnklYgepB9mqNYUd+6ZAUb

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks