General

  • Target

    a5050731b7b67eed2776b246b06690ba62372547ea9ee304abb21494302c5932

  • Size

    7.0MB

  • Sample

    230526-m11ldaff3y

  • MD5

    f420c1c9bff54eaef7806384c3a323bf

  • SHA1

    414231deeaff7644b3e47dc45bf8e9428996afc9

  • SHA256

    a5050731b7b67eed2776b246b06690ba62372547ea9ee304abb21494302c5932

  • SHA512

    628f8b9aed7de8b352623894a61f229bbb85948cd1e53279c093645b0f6f87aa434e6a7d99074ea314d5d79de846d7166e18d2ca6fc9d090a8b1ae3004038e32

  • SSDEEP

    98304:dE2ekK2RGHX68ibmfOVcuI3czHjlxkEZsLcb++p3HW+npxYjxI7Fq:7QIG3+sOVlzDnRM+R2mxsxU

Malware Config

Targets

    • Target

      a5050731b7b67eed2776b246b06690ba62372547ea9ee304abb21494302c5932

    • Size

      7.0MB

    • MD5

      f420c1c9bff54eaef7806384c3a323bf

    • SHA1

      414231deeaff7644b3e47dc45bf8e9428996afc9

    • SHA256

      a5050731b7b67eed2776b246b06690ba62372547ea9ee304abb21494302c5932

    • SHA512

      628f8b9aed7de8b352623894a61f229bbb85948cd1e53279c093645b0f6f87aa434e6a7d99074ea314d5d79de846d7166e18d2ca6fc9d090a8b1ae3004038e32

    • SSDEEP

      98304:dE2ekK2RGHX68ibmfOVcuI3czHjlxkEZsLcb++p3HW+npxYjxI7Fq:7QIG3+sOVlzDnRM+R2mxsxU

    • Executes dropped EXE

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Tasks