General

  • Target

    06d289bd004b173608b0e233c11ffc74d82f8034eaa0a00238bc1ddee060107d

  • Size

    6.2MB

  • Sample

    221128-ybhvtafd3x

  • MD5

    71f19f5901630f2a5f0634da0ff4ab01

  • SHA1

    f57c0bcb0c1790f3bd72b94e8a9b1bcfdd85c4b2

  • SHA256

    06d289bd004b173608b0e233c11ffc74d82f8034eaa0a00238bc1ddee060107d

  • SHA512

    aec94dbd0c65de23a50ed692b532bd615a0656988c4351c78301ed76bc0a08cda41824bf486edaba50f00e0f77f7a624177fa6d4ad11477460e63e7add126992

  • SSDEEP

    196608:LK90MDsQMEyJmbXuJoY1mMEtXeTI4RNcN4+g:LzfQgmbXuWY1BcsND

Malware Config

Targets

    • Target

      tlrycdxgq1241_veryhuo.com/TerrariaInvEdit.572.exe

    • Size

      7.6MB

    • MD5

      126f7b15dd3ca9c158b5de2347698509

    • SHA1

      f916c41341e41bc8786737f66d487825fccc4b33

    • SHA256

      59f76c54d0339d1470ccaac5140931212975b738737a4e74b2c9372d1232a1e7

    • SHA512

      510e890d163cb1fa14398bbfec05a3594acc3e7dd81fd64c0bf41337ab8a9285dec215d8397fb8a5336e6d3299650e2cd4300690a79daab389726c2f82e2275c

    • SSDEEP

      98304:UEZgY/yjQGX5wpt4Wn2JVFfOxnTl2n7fmHscHF/hpNrGnjAyRVL8zFsR40FzlmIS:UEVHGX2bWJVFWx6IsoFZpNrGdkiVS

    • Target

      tlrycdxgq1241_veryhuo.com/最火软件站.url

    • Size

      218B

    • MD5

      f85cc10747107abce6635b1f1e7f5bed

    • SHA1

      84276b22942205afb019acaaee50a0f7708182f9

    • SHA256

      e2e671048c0cde8b1d682000129b648ffee1ee303c97eedc621fe93ed4a292d0

    • SHA512

      6fb539d47ff607cfa603509c3cc3493bd46b33307a2487e523be4f582bc241cbeb4b4e837df99fabf504c3a45e18c97c7399e13174e1b6b0426f7227792c741a

    Score
    1/10

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

1
T1012

Tasks