General

  • Target

    57ce67151f624d1f96e566760734830238b0a91f67746b55454735fa0f731c4c

  • Size

    51KB

  • Sample

    221125-kh77dshe3x

  • MD5

    1d9c226f18c785005965fef5ae1736a8

  • SHA1

    f3bb7399199d1e9cc076589ff60e588a2efdd9a0

  • SHA256

    57ce67151f624d1f96e566760734830238b0a91f67746b55454735fa0f731c4c

  • SHA512

    5bfe72a54dba76bd372c33c599077d6af3570882d17bfeb336f3996188b91dc31cf07bde4bceea7f964b43fcfc1c9a2556935eae345b67b3dbe5bb83b8d6be60

  • SSDEEP

    1536:Ox/0fXKXAkU49OV+SGEYBocUaAuCSXebCq/Y6i2:Ox/0f7dwBoKUSubta2

Malware Config

Targets

    • Target

      57ce67151f624d1f96e566760734830238b0a91f67746b55454735fa0f731c4c

    • Size

      51KB

    • MD5

      1d9c226f18c785005965fef5ae1736a8

    • SHA1

      f3bb7399199d1e9cc076589ff60e588a2efdd9a0

    • SHA256

      57ce67151f624d1f96e566760734830238b0a91f67746b55454735fa0f731c4c

    • SHA512

      5bfe72a54dba76bd372c33c599077d6af3570882d17bfeb336f3996188b91dc31cf07bde4bceea7f964b43fcfc1c9a2556935eae345b67b3dbe5bb83b8d6be60

    • SSDEEP

      1536:Ox/0fXKXAkU49OV+SGEYBocUaAuCSXebCq/Y6i2:Ox/0f7dwBoKUSubta2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks