General

  • Target

    c18fc1fce7be31b702af0907b081c734352df1bece8f9cd3aa24090db454ee60

  • Size

    869KB

  • Sample

    221128-rxea7aeg4x

  • MD5

    9cd64840ec62307cc99781fa9a0c8a79

  • SHA1

    05310fe4130550e778b379707ae5e0a8ca28522d

  • SHA256

    c18fc1fce7be31b702af0907b081c734352df1bece8f9cd3aa24090db454ee60

  • SHA512

    f5f2f8ffd7e078fb3d5514292011f166be8905dba0252d2e6814c256cfe44721755212f918ae560f279892cbad703b241c61dadbd763ebd8ab5d6c5197c0b618

  • SSDEEP

    12288:lfKPYejlw3uKw55FdgiF0Hfw0f9D/zKyH9QFzygktOZSo1v3WkgJwFMYNzER9+4i:lf13ug+yfXJ7KyHi8GZx1cGlcRFz/M

Malware Config

Targets

    • Target

      c18fc1fce7be31b702af0907b081c734352df1bece8f9cd3aa24090db454ee60

    • Size

      869KB

    • MD5

      9cd64840ec62307cc99781fa9a0c8a79

    • SHA1

      05310fe4130550e778b379707ae5e0a8ca28522d

    • SHA256

      c18fc1fce7be31b702af0907b081c734352df1bece8f9cd3aa24090db454ee60

    • SHA512

      f5f2f8ffd7e078fb3d5514292011f166be8905dba0252d2e6814c256cfe44721755212f918ae560f279892cbad703b241c61dadbd763ebd8ab5d6c5197c0b618

    • SSDEEP

      12288:lfKPYejlw3uKw55FdgiF0Hfw0f9D/zKyH9QFzygktOZSo1v3WkgJwFMYNzER9+4i:lf13ug+yfXJ7KyHi8GZx1cGlcRFz/M

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks