General

  • Target

    3e15fb3bf24db98f1d2d1dc33b22815cfa138b57027190ed5e2954200e0f0d8f

  • Size

    864KB

  • Sample

    221125-jwqc3aga6y

  • MD5

    88445e9083904a9a213cba464c523a72

  • SHA1

    9934545113bab91a320530b50f5e12b62ab0722f

  • SHA256

    3e15fb3bf24db98f1d2d1dc33b22815cfa138b57027190ed5e2954200e0f0d8f

  • SHA512

    1e461391dff36c54938cc93c2b1502037f0dbb52c2a72aabb92bec25c15c891fc0ce94d011d63024ffc8cd04e40b3de1e9385b634c089c31da6320673e7afc13

  • SSDEEP

    24576:cnBTMfHuyPdElsxVuMzTBISUZmoXy11r:EMfnlxTzKli11

Malware Config

Targets

    • Target

      3e15fb3bf24db98f1d2d1dc33b22815cfa138b57027190ed5e2954200e0f0d8f

    • Size

      864KB

    • MD5

      88445e9083904a9a213cba464c523a72

    • SHA1

      9934545113bab91a320530b50f5e12b62ab0722f

    • SHA256

      3e15fb3bf24db98f1d2d1dc33b22815cfa138b57027190ed5e2954200e0f0d8f

    • SHA512

      1e461391dff36c54938cc93c2b1502037f0dbb52c2a72aabb92bec25c15c891fc0ce94d011d63024ffc8cd04e40b3de1e9385b634c089c31da6320673e7afc13

    • SSDEEP

      24576:cnBTMfHuyPdElsxVuMzTBISUZmoXy11r:EMfnlxTzKli11

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

2
T1012

System Information Discovery

1
T1082

Tasks