General

  • Target

    1be7c3f7f21a7ee8b77e76baf171877bd3476e11df09bd6c618b50b1ec07ec82

  • Size

    24KB

  • Sample

    221206-zdq5msbd28

  • MD5

    7666ac02238551d72d2c1ca668813236

  • SHA1

    2d804d7b36f6389223d4542f7151de4839737952

  • SHA256

    1be7c3f7f21a7ee8b77e76baf171877bd3476e11df09bd6c618b50b1ec07ec82

  • SHA512

    e5294bd9ed3122fa450d04a36a8d500b28b0849d30279b11bbc2de486db529a26eb518aa1e64ad6444acf6b11887ab62478daafdbc5e787efb351042947c73c4

  • SSDEEP

    192:g3dSzmP8RUZR6vn3YI+WEtzWeHaLXfW84bt:g8zLC/6v3YI+BIfW84b

Malware Config

Targets

    • Target

      1be7c3f7f21a7ee8b77e76baf171877bd3476e11df09bd6c618b50b1ec07ec82

    • Size

      24KB

    • MD5

      7666ac02238551d72d2c1ca668813236

    • SHA1

      2d804d7b36f6389223d4542f7151de4839737952

    • SHA256

      1be7c3f7f21a7ee8b77e76baf171877bd3476e11df09bd6c618b50b1ec07ec82

    • SHA512

      e5294bd9ed3122fa450d04a36a8d500b28b0849d30279b11bbc2de486db529a26eb518aa1e64ad6444acf6b11887ab62478daafdbc5e787efb351042947c73c4

    • SSDEEP

      192:g3dSzmP8RUZR6vn3YI+WEtzWeHaLXfW84bt:g8zLC/6v3YI+BIfW84b

    • UAC bypass

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Deletes itself

    • Loads dropped DLL

    • Adds Run key to start application

MITRE ATT&CK Enterprise v6

Tasks