General

  • Target

    d79296306d973cf5338d387074e908a7

  • Size

    404KB

  • Sample

    240320-bt2djsea3x

  • MD5

    d79296306d973cf5338d387074e908a7

  • SHA1

    45090d3fd786e5e34f8677d4521322a5a4ab83e0

  • SHA256

    b88be1a9ed4f91d6c598a92a7fbde417dd7ad589b7c6a2e436db518a14558b21

  • SHA512

    db12bea54b1eb6a4ed134260049d91c51fdb87941196d6e4af25962a75215e798d2557cc713a5538fc1d7b80994494cbcea8fdc6d401d16f4a21fe5339c99132

  • SSDEEP

    6144:i4INpROSJfcd1tuP6MQsQ123GSxJIIVY0VE8gySVbjboPIZNTBTU4:i4UROm0tuPWsQX4e/cE8zeDxZ/U

Malware Config

Targets

    • Target

      d79296306d973cf5338d387074e908a7

    • Size

      404KB

    • MD5

      d79296306d973cf5338d387074e908a7

    • SHA1

      45090d3fd786e5e34f8677d4521322a5a4ab83e0

    • SHA256

      b88be1a9ed4f91d6c598a92a7fbde417dd7ad589b7c6a2e436db518a14558b21

    • SHA512

      db12bea54b1eb6a4ed134260049d91c51fdb87941196d6e4af25962a75215e798d2557cc713a5538fc1d7b80994494cbcea8fdc6d401d16f4a21fe5339c99132

    • SSDEEP

      6144:i4INpROSJfcd1tuP6MQsQ123GSxJIIVY0VE8gySVbjboPIZNTBTU4:i4UROm0tuPWsQX4e/cE8zeDxZ/U

    • Windows security bypass

    • Disables taskbar notifications via registry modification

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Windows security modification

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks