General

  • Target

    8a69b8b01bdfeb1dce85bc200c2933b1d083e4ff67d3f82f1d43e79eb618cd95

  • Size

    1.4MB

  • Sample

    221129-vy3xqach8t

  • MD5

    2feb351e17c470af17d5e117a9052c34

  • SHA1

    624f926ebf126e1895d0712d7e75ed014cc82e6b

  • SHA256

    8a69b8b01bdfeb1dce85bc200c2933b1d083e4ff67d3f82f1d43e79eb618cd95

  • SHA512

    d34cba825ea621c8127076d51430c416b94b6355d5eba720f667a9863764cb34111ae2f36fb1a9ad98e28d19da774fefe06cc3aee03a803fb14d6b39325833d1

  • SSDEEP

    24576:PrA2bJSyX5GhE76+nKiFsymSkR909QFgwwrJn2YzwITkJM8hbf1rM:PlHJ72GKiFmS4D6nJLztFAdrM

Score
8/10

Malware Config

Targets

    • Target

      8a69b8b01bdfeb1dce85bc200c2933b1d083e4ff67d3f82f1d43e79eb618cd95

    • Size

      1.4MB

    • MD5

      2feb351e17c470af17d5e117a9052c34

    • SHA1

      624f926ebf126e1895d0712d7e75ed014cc82e6b

    • SHA256

      8a69b8b01bdfeb1dce85bc200c2933b1d083e4ff67d3f82f1d43e79eb618cd95

    • SHA512

      d34cba825ea621c8127076d51430c416b94b6355d5eba720f667a9863764cb34111ae2f36fb1a9ad98e28d19da774fefe06cc3aee03a803fb14d6b39325833d1

    • SSDEEP

      24576:PrA2bJSyX5GhE76+nKiFsymSkR909QFgwwrJn2YzwITkJM8hbf1rM:PlHJ72GKiFmS4D6nJLztFAdrM

    Score
    8/10
    • Executes dropped EXE

    • Modifies Installed Components in the registry

    • Deletes itself

    • Themida packer

      Detects Themida, an advanced Windows software protection system.

    • Adds Run key to start application

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

2
T1060

Defense Evasion

Modify Registry

3
T1112

Discovery

System Information Discovery

1
T1082

Tasks