General

  • Target

    b0c7cbea991d424ecb4f1e44c802a33e453d9e2123b4dac27a747d4a8a91526e

  • Size

    936KB

  • Sample

    221128-ryjbjaeg8x

  • MD5

    d6516f6e25cac638d6ed82a2451629c1

  • SHA1

    b830732215568607fbf7db62d57dd9aa7669cbeb

  • SHA256

    b0c7cbea991d424ecb4f1e44c802a33e453d9e2123b4dac27a747d4a8a91526e

  • SHA512

    59eabb9562df72e6752cdd77bc24988459cea0aa3666e793524635d2f26e0918904bbc05dc56ac4bb0f3749e46b8e715a21d3bc761169b0092a71f4cd4600ef8

  • SSDEEP

    24576:l44cO6n/oI0OQwnM2iCj9OvuE4mriRJLm+j0nf:l44cO6n/ov/fCjQvP4mriRhm+Sf

Malware Config

Targets

    • Target

      b0c7cbea991d424ecb4f1e44c802a33e453d9e2123b4dac27a747d4a8a91526e

    • Size

      936KB

    • MD5

      d6516f6e25cac638d6ed82a2451629c1

    • SHA1

      b830732215568607fbf7db62d57dd9aa7669cbeb

    • SHA256

      b0c7cbea991d424ecb4f1e44c802a33e453d9e2123b4dac27a747d4a8a91526e

    • SHA512

      59eabb9562df72e6752cdd77bc24988459cea0aa3666e793524635d2f26e0918904bbc05dc56ac4bb0f3749e46b8e715a21d3bc761169b0092a71f4cd4600ef8

    • SSDEEP

      24576:l44cO6n/oI0OQwnM2iCj9OvuE4mriRJLm+j0nf:l44cO6n/ov/fCjQvP4mriRhm+Sf

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

System Information Discovery

1
T1082

Tasks