General

  • Target

    b60b483dc2a83b6b94032c5e7c7b1e910650ce32e1ae137ce96302ea7cf1097b

  • Size

    7.0MB

  • Sample

    230526-m7t26sff5v

  • MD5

    ea1aededc8a182bb29ef29adc349451e

  • SHA1

    4e2786e2b09ffce8585dde47e66f3fc567947b0e

  • SHA256

    b60b483dc2a83b6b94032c5e7c7b1e910650ce32e1ae137ce96302ea7cf1097b

  • SHA512

    16a2048e20abdbef0bc35c56f22c13abac139c4d09f73d67311819be0ac84bcc66ab94e5493ec61ec00341b63d71414787e0d79f3027ed6867dadff119980310

  • SSDEEP

    98304:Hbbqjl0pzd20zdSe+lsPWF3A8Qa8XxIXJTsKCY/H8TP62nbxzLj8N2Es3pU:Q0NdLSe+lsuF3ATEJGY/czjb9a2EsW

Malware Config

Targets

    • Target

      b60b483dc2a83b6b94032c5e7c7b1e910650ce32e1ae137ce96302ea7cf1097b

    • Size

      7.0MB

    • MD5

      ea1aededc8a182bb29ef29adc349451e

    • SHA1

      4e2786e2b09ffce8585dde47e66f3fc567947b0e

    • SHA256

      b60b483dc2a83b6b94032c5e7c7b1e910650ce32e1ae137ce96302ea7cf1097b

    • SHA512

      16a2048e20abdbef0bc35c56f22c13abac139c4d09f73d67311819be0ac84bcc66ab94e5493ec61ec00341b63d71414787e0d79f3027ed6867dadff119980310

    • SSDEEP

      98304:Hbbqjl0pzd20zdSe+lsPWF3A8Qa8XxIXJTsKCY/H8TP62nbxzLj8N2Es3pU:Q0NdLSe+lsuF3ATEJGY/czjb9a2EsW

    • Executes dropped EXE

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Matrix ATT&CK v6

Persistence

Registry Run Keys / Startup Folder

1
T1060

Defense Evasion

Modify Registry

1
T1112

Discovery

Query Registry

1
T1012

Tasks