General

  • Target

    7718059be7319b82f90c1c850b37db97

  • Size

    180KB

  • Sample

    231226-r9t76sheep

  • MD5

    7718059be7319b82f90c1c850b37db97

  • SHA1

    668a23a142a5b2c6c59417366015b04201f24c50

  • SHA256

    f0814da92fe94292694f6cd776f5b125e64967093ded9f47c38aa600ce52a7a3

  • SHA512

    cc397ae3acbdf1302d27f917b9276fa02d8305ea97f2eda39b34a6fd92fe6326aec2b88c584b9091521b9eb727fb9ff392e177e81d94a311d0f09ffdacd39352

  • SSDEEP

    3072:Wr/T6litX5X2Z2AXzMvLnvoxUt+5SzzI3kI5IXvlLIo:WrLyYJXOdmI3l+X

Malware Config

Targets

    • Target

      7718059be7319b82f90c1c850b37db97

    • Size

      180KB

    • MD5

      7718059be7319b82f90c1c850b37db97

    • SHA1

      668a23a142a5b2c6c59417366015b04201f24c50

    • SHA256

      f0814da92fe94292694f6cd776f5b125e64967093ded9f47c38aa600ce52a7a3

    • SHA512

      cc397ae3acbdf1302d27f917b9276fa02d8305ea97f2eda39b34a6fd92fe6326aec2b88c584b9091521b9eb727fb9ff392e177e81d94a311d0f09ffdacd39352

    • SSDEEP

      3072:Wr/T6litX5X2Z2AXzMvLnvoxUt+5SzzI3kI5IXvlLIo:WrLyYJXOdmI3l+X

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Checks whether UAC is enabled

MITRE ATT&CK Enterprise v15

Tasks