Overview

overview

8

Static

static

michael ja...al.mp3

windows7-x64

1

michael ja...al.mp3

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ap-file-michael+jackson+-+smooth+criminal.mp3-12396720.zip

  • Size

    5.6MB

  • Sample

    221124-wcv6esac96

  • MD5

    e7fdb36fa230ea382505263ed432b145

  • SHA1

    e17e1ba6588c2c9a363bce5e64bca0637f01b003

  • SHA256

    56aa8230cb483f9450af11d8e0845de6cb1fd09228ba73fa9956c4d4417c6ddd

  • SHA512

    e697fb8e3bd3cf387d44be2a70cb11e30ecf6e1fc2a1c2676a6e67cdc8ab75089ae953073ed8b51053b395cfd5cae0a948a344434ca6848840a9156ca25e04f8

  • SSDEEP

    98304:qmSMZHgS4dQE+Ku2YMQmMCCuvZ8BI+z6bFi4TKHSO4ZlPYKNxsRAs8APiOUMAqC1:hmb64nBQmwux8feBlOuPxsqs7PidMAqG

Score
8/10
persistence

Malware Config

Targets

    • Target

      michael jackson - smooth criminal.mp3

    • Size

      5.8MB

    • MD5

      5c81c42304ad2bd3a70d6553f36ad9bd

    • SHA1

      9d4152f46af65bc07f4cf94c01b1be6a01617b21

    • SHA256

      8d3ee1eae890e748096c04c683d4989853b3a87d1b094b4868912f18145c62b5

    • SHA512

      b171c9152dc53771f202ce50ca797a92a5d15b3f145d70573b0638f8a237a819f012f1700815d25cfe0da6f643ee28b23c503d5e8046ebafe6a7108ceca191cc

    • SSDEEP

      98304:tud2xD9/4Gs7cBLl9AWLxl7aY3quOWaS+6RTa/LfL1WPdHtEDmNkjKp8N7bO4Jcf:Md5G7LLDafz7F6FCLBcdHt9N4E87bO/f

    Score
    8/10
    persistence

    • Modifies Installed Components in the registry

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

2
T1060

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Query Registry

3
T1012

Peripheral Device Discovery

1
T1120

System Information Discovery

3
T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks