General

  • Target

    2cf7335ae9b05e449dacd2b95693ba60

  • Size

    672KB

  • Sample

    231231-h2watsdgfl

  • MD5

    2cf7335ae9b05e449dacd2b95693ba60

  • SHA1

    8795ca628e1a7bc0d1f33203af2702a5b7b8bfc8

  • SHA256

    02837e7c28378e0517e0efe433ef3f8e0b4d9daebdb4b9cff0df4ab1ba3ce163

  • SHA512

    2e9cda0631e47533ac5a1e6dfd14a6a770527480068355b0d92ef0da2b8c3bc18910f5a025e3d8aef8840c974e1ec6c1963d543c71a3a3239706111b6286b27b

  • SSDEEP

    12288:neBNUbTVO86UCHruRdp+WA00SKCpVRwfHXSVUhbxk9e/pJu:nJIUCNd0nKwYPX+UhbW9eM

Malware Config

Targets

    • Target

      2cf7335ae9b05e449dacd2b95693ba60

    • Size

      672KB

    • MD5

      2cf7335ae9b05e449dacd2b95693ba60

    • SHA1

      8795ca628e1a7bc0d1f33203af2702a5b7b8bfc8

    • SHA256

      02837e7c28378e0517e0efe433ef3f8e0b4d9daebdb4b9cff0df4ab1ba3ce163

    • SHA512

      2e9cda0631e47533ac5a1e6dfd14a6a770527480068355b0d92ef0da2b8c3bc18910f5a025e3d8aef8840c974e1ec6c1963d543c71a3a3239706111b6286b27b

    • SSDEEP

      12288:neBNUbTVO86UCHruRdp+WA00SKCpVRwfHXSVUhbxk9e/pJu:nJIUCNd0nKwYPX+UhbW9eM

    • Disables taskbar notifications via registry modification

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks