General

  • Target

    loader (1).exe

  • Size

    2.9MB

  • Sample

    231225-a6z6ksdfbq

  • MD5

    da9f135120717eb29471a1e55237ff60

  • SHA1

    5115a2202f29af5b8272be527403913809cae7f9

  • SHA256

    ab792b2d3d017df1c0765e01e5d21eebbf604f29bdec78e682630073cc1036dd

  • SHA512

    21845e7a9ebf37b158a9331425d7edc65bb5771f122360a7129db62dbbbc249c23b6476de181cdf5e866abc4936a0306761ea96f794250caeaea008345394f57

  • SSDEEP

    49152:neJvs1aPvkO4lhfJRboq3gSwQVGGnIO2JTAWrrBcUg0EEWk:KjB4lS3SwQ022JTAWrrBcUg0EE

Malware Config

Targets

    • Target

      loader (1).exe

    • Size

      2.9MB

    • MD5

      da9f135120717eb29471a1e55237ff60

    • SHA1

      5115a2202f29af5b8272be527403913809cae7f9

    • SHA256

      ab792b2d3d017df1c0765e01e5d21eebbf604f29bdec78e682630073cc1036dd

    • SHA512

      21845e7a9ebf37b158a9331425d7edc65bb5771f122360a7129db62dbbbc249c23b6476de181cdf5e866abc4936a0306761ea96f794250caeaea008345394f57

    • SSDEEP

      49152:neJvs1aPvkO4lhfJRboq3gSwQVGGnIO2JTAWrrBcUg0EEWk:KjB4lS3SwQ022JTAWrrBcUg0EE

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks