Resubmissions

18-03-2024 04:17

240318-ewpdjsga35 8

18-03-2024 03:59

240318-ej4mpsfg67 10

General

  • Target

    download

  • Size

    2KB

  • Sample

    240318-ewpdjsga35

  • MD5

    4e79e21cb97b8518a239e31cf0d11fa3

  • SHA1

    2dff54cdc32d26278d9fe2919ed8bf3566092749

  • SHA256

    b3ab92edbf5f695b8de6a6dc7215b81355071d5919e81e482701e102ca904374

  • SHA512

    94d6729a958c7967ca059a9d6b31d1522e372fc623b4aab4114429b733c0686af306a7166bf02681f8be9ec4b01ccf5d5d17d18e5ca0f087d4fc62889bb4830d

Score
8/10

Malware Config

Targets

    • Target

      download

    • Size

      2KB

    • MD5

      4e79e21cb97b8518a239e31cf0d11fa3

    • SHA1

      2dff54cdc32d26278d9fe2919ed8bf3566092749

    • SHA256

      b3ab92edbf5f695b8de6a6dc7215b81355071d5919e81e482701e102ca904374

    • SHA512

      94d6729a958c7967ca059a9d6b31d1522e372fc623b4aab4114429b733c0686af306a7166bf02681f8be9ec4b01ccf5d5d17d18e5ca0f087d4fc62889bb4830d

    Score
    8/10
    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

MITRE ATT&CK Matrix ATT&CK v13

Persistence

Boot or Logon Autostart Execution

2
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

2
T1547

Registry Run Keys / Startup Folder

2
T1547.001

Defense Evasion

Modify Registry

3
T1112

Discovery

System Information Discovery

2
T1082

Query Registry

2
T1012

Tasks