Resubmissions

26/04/2023, 12:27

230426-pm2mmahc48 1

25/04/2023, 20:22

230425-y5h3nsef6s 1

20/04/2023, 15:17

230420-sn73kscf4t 7

20/04/2023, 15:14

230420-smkkwscf3w 1

19/04/2023, 15:09

230419-sjw5hsdb6y 8

19/04/2023, 12:30

230419-ppj6cscc7z 8

17/04/2023, 20:19

230417-y3xs2sfh84 7

17/04/2023, 16:38

230417-t5e9kagg91 10

17/04/2023, 15:09

230417-sjf4asgd2v 7

General

  • Target

    https://www.youtube.com

  • Sample

    230419-ppj6cscc7z

Malware Config

Targets

    • Target

      https://www.youtube.com

    • Downloads MZ/PE file

    • Modifies Installed Components in the registry

    • Modifies Windows Firewall

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks