General

  • Target

    sample

  • Size

    82KB

  • Sample

    240501-egqm3ahd46

  • MD5

    a54692a454fde86f9760eeebb8055b01

  • SHA1

    0ace5e9599354964a9df23766a334aa98c6a9935

  • SHA256

    7d682888fc1e56ae5184f4b7818df566e16f7d8857db0e397334f7a9cb03ef9f

  • SHA512

    4092d313eb8278daa8f25a5f21b41564c95a69954ebbf9c94b30df086886d325a758c354c22ad95862a4832f4928228698fc73f8271340eb0a1e36ac41488de8

  • SSDEEP

    1536:fqcEYq4NOFYPvjpA8KQkeSVN0NtsQtMtCxdKY3:CcEYqmOupntaCT

Malware Config

Targets

    • Target

      sample

    • Size

      82KB

    • MD5

      a54692a454fde86f9760eeebb8055b01

    • SHA1

      0ace5e9599354964a9df23766a334aa98c6a9935

    • SHA256

      7d682888fc1e56ae5184f4b7818df566e16f7d8857db0e397334f7a9cb03ef9f

    • SHA512

      4092d313eb8278daa8f25a5f21b41564c95a69954ebbf9c94b30df086886d325a758c354c22ad95862a4832f4928228698fc73f8271340eb0a1e36ac41488de8

    • SSDEEP

      1536:fqcEYq4NOFYPvjpA8KQkeSVN0NtsQtMtCxdKY3:CcEYqmOupntaCT

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Detected potential entity reuse from brand microsoft.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks