General

  • Target

    f60f404494766df289220f643e5ca730

  • Size

    364KB

  • Sample

    230131-v6d9bshc93

  • MD5

    f60f404494766df289220f643e5ca730

  • SHA1

    386d63dc8623b901e02293e107dc58f280c09823

  • SHA256

    686afc6fb753f15bed690defac787693d35a4afe6c8ac2709d8c53bfad119df8

  • SHA512

    fe0d72f44a233bdea685daeb740285b82861b8e016e8e9b2ec405afb2b27f71f64b723e80eb49bc3a3f9a92065444fd2b3096368ec008ebd7bc8915352fd39b2

  • SSDEEP

    3072:cXBlllllllllllllllllllllllllXO7WXW1+cCUQCiWqAZffIXdHMnIr2FhqDow2:j7WXWkWvfhWYlF73k

Score
10/10

Malware Config

Targets

    • Target

      f60f404494766df289220f643e5ca730

    • Size

      364KB

    • MD5

      f60f404494766df289220f643e5ca730

    • SHA1

      386d63dc8623b901e02293e107dc58f280c09823

    • SHA256

      686afc6fb753f15bed690defac787693d35a4afe6c8ac2709d8c53bfad119df8

    • SHA512

      fe0d72f44a233bdea685daeb740285b82861b8e016e8e9b2ec405afb2b27f71f64b723e80eb49bc3a3f9a92065444fd2b3096368ec008ebd7bc8915352fd39b2

    • SSDEEP

      3072:cXBlllllllllllllllllllllllllXO7WXW1+cCUQCiWqAZffIXdHMnIr2FhqDow2:j7WXWkWvfhWYlF73k

    Score
    10/10
    • Process spawned unexpected child process

      This typically indicates the parent process was compromised via an exploit or macro.

    • Deletes itself

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Hidden Files and Directories

1
T1158

Defense Evasion

Modify Registry

1
T1112

Hidden Files and Directories

1
T1158

Discovery

Query Registry

2
T1012

System Information Discovery

2
T1082

Tasks