General

  • Target

    9c80800b73b79253d33e1b06a43d364316d5776a5208dafa24f4d9bd42554299

  • Size

    3.3MB

  • Sample

    221124-rwvxjsag22

  • MD5

    7cff141bdd68f4fc0b604980b650c71e

  • SHA1

    4e110caf953bb9a33ca22b0b81de3f578a9ca4fc

  • SHA256

    9c80800b73b79253d33e1b06a43d364316d5776a5208dafa24f4d9bd42554299

  • SHA512

    19610b4a7261062ec64c9b5e95585670cea75e723828e1fe969903c5d9379c81772b29045f1eea14b6dc87746ca5161e762cb69da074f90a2bdcd8a3fcf7d703

  • SSDEEP

    98304:L3YobVRxj94j/JpY6A7PFLiWg5RxjUZz6o:jYeujnY6aIrYZ1

Malware Config

Targets

    • Target

      9c80800b73b79253d33e1b06a43d364316d5776a5208dafa24f4d9bd42554299

    • Size

      3.3MB

    • MD5

      7cff141bdd68f4fc0b604980b650c71e

    • SHA1

      4e110caf953bb9a33ca22b0b81de3f578a9ca4fc

    • SHA256

      9c80800b73b79253d33e1b06a43d364316d5776a5208dafa24f4d9bd42554299

    • SHA512

      19610b4a7261062ec64c9b5e95585670cea75e723828e1fe969903c5d9379c81772b29045f1eea14b6dc87746ca5161e762cb69da074f90a2bdcd8a3fcf7d703

    • SSDEEP

      98304:L3YobVRxj94j/JpY6A7PFLiWg5RxjUZz6o:jYeujnY6aIrYZ1

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Execution

Scheduled Task

1
T1053

Persistence

Registry Run Keys / Startup Folder

1
T1060

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks