General

  • Target

    8b761d490b00f36e21c90676a04d099d

  • Size

    8KB

  • Sample

    240203-fm7dfacbbp

  • MD5

    8b761d490b00f36e21c90676a04d099d

  • SHA1

    6a0a379767100ddeb407d5e08cbc0611481e9bc4

  • SHA256

    9c79744bb25f789fc87639a319d7b4e2baddeb76435076b75903783e31b65296

  • SHA512

    aa71a15e239f8616f936cd6e25b81793ac522518a7e033f1dde84e220feaa0d9f5b609f6045676ad6805c4f1ab9cdc751ba4e0d3112e9c650355a0b8bc276b87

  • SSDEEP

    192:g2TCTTytOWDzw9rPcnj5WMlVETbRwHjX2tLEKj:pCTbWY9rEPlVE2HT2t4+

Malware Config

Targets

    • Target

      8b761d490b00f36e21c90676a04d099d

    • Size

      8KB

    • MD5

      8b761d490b00f36e21c90676a04d099d

    • SHA1

      6a0a379767100ddeb407d5e08cbc0611481e9bc4

    • SHA256

      9c79744bb25f789fc87639a319d7b4e2baddeb76435076b75903783e31b65296

    • SHA512

      aa71a15e239f8616f936cd6e25b81793ac522518a7e033f1dde84e220feaa0d9f5b609f6045676ad6805c4f1ab9cdc751ba4e0d3112e9c650355a0b8bc276b87

    • SSDEEP

      192:g2TCTTytOWDzw9rPcnj5WMlVETbRwHjX2tLEKj:pCTbWY9rEPlVE2HT2t4+

    • Modifies WinLogon for persistence

    • Drops file in Drivers directory

    • Sets service image path in registry

    • Modifies system executable filetype association

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Installs/modifies Browser Helper Object

      BHOs are DLL modules which act as plugins for Internet Explorer.

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks