General

  • Target

    reFX Nexus v4.5.13 CE.exe

  • Size

    16.8MB

  • Sample

    240213-1y82maab2t

  • MD5

    720d291545dc37f827202507a5608dfe

  • SHA1

    96d11309c6e1595233de661234593f74ddae0360

  • SHA256

    908f896b1f1ae619ae921701079173b062e51cbe6eccd21524764f690d2c723b

  • SHA512

    d99f4351de6ef62b2bbb48d5fb475b2f6d7788e9a694bb8ed2b98dbba3bca75438c97ccad7ee09b23190a9ac5b9c717ef05f4d69a26d1e8da87cca6333df8d3e

  • SSDEEP

    393216:NjHdeZrHgslnVsuwGc5Gpep0JqzXw84yoI3lcyh5w:p9qSXGcIpjJug833Rw

Malware Config

Targets

    • Target

      reFX Nexus v4.5.13 CE.exe

    • Size

      16.8MB

    • MD5

      720d291545dc37f827202507a5608dfe

    • SHA1

      96d11309c6e1595233de661234593f74ddae0360

    • SHA256

      908f896b1f1ae619ae921701079173b062e51cbe6eccd21524764f690d2c723b

    • SHA512

      d99f4351de6ef62b2bbb48d5fb475b2f6d7788e9a694bb8ed2b98dbba3bca75438c97ccad7ee09b23190a9ac5b9c717ef05f4d69a26d1e8da87cca6333df8d3e

    • SSDEEP

      393216:NjHdeZrHgslnVsuwGc5Gpep0JqzXw84yoI3lcyh5w:p9qSXGcIpjJug833Rw

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

MITRE ATT&CK Enterprise v15

Tasks