Resubmissions

09-04-2024 11:14

240409-ncbg1sde93 7

09-04-2024 11:11

240409-nandssgg6v 10

General

  • Target

    wallpaper.jpg

  • Size

    11KB

  • Sample

    240409-nandssgg6v

  • MD5

    d246e2938a820cde7586bed0f346900c

  • SHA1

    c03acdafeee855fdeca8e06b8abc712a1e85b505

  • SHA256

    94e5de9b6c0b0f3376df8563b7e70df7392a452513082300da8b113992cde728

  • SHA512

    0a574f6c84aee25d71479eed5c78d06a12d98f558628a311b08fb1d17609f12403f7d94d2d6d2179faf6252c0e96537a9bb88cae420282d6d211a1e821165d27

  • SSDEEP

    192:khdfAW3/1AMExkhiiNEsD4SbAo0Y2dRhEN8hTA2zVXIDNgPx54mjmx7xDsVQzWB+:CfAmvMkhfNE+PbAox2JEWVXIDmPP4p7d

Malware Config

Targets

    • Target

      wallpaper.jpg

    • Size

      11KB

    • MD5

      d246e2938a820cde7586bed0f346900c

    • SHA1

      c03acdafeee855fdeca8e06b8abc712a1e85b505

    • SHA256

      94e5de9b6c0b0f3376df8563b7e70df7392a452513082300da8b113992cde728

    • SHA512

      0a574f6c84aee25d71479eed5c78d06a12d98f558628a311b08fb1d17609f12403f7d94d2d6d2179faf6252c0e96537a9bb88cae420282d6d211a1e821165d27

    • SSDEEP

      192:khdfAW3/1AMExkhiiNEsD4SbAo0Y2dRhEN8hTA2zVXIDNgPx54mjmx7xDsVQzWB+:CfAmvMkhfNE+PbAox2JEWVXIDmPP4p7d

    • UAC bypass

    • Disables Task Manager via registry modification

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Legitimate hosting services abused for malware hosting/C2

    • Sets desktop wallpaper using registry

MITRE ATT&CK Enterprise v15

Tasks