General

  • Target

    0b721ea6660f2b466c2b6305bb10e44350ccd707251adf68861993308bcb80de

  • Size

    3.6MB

  • Sample

    240603-w6t58aef9y

  • MD5

    2aacbf5af7500bef2245f2a6b7dfecf2

  • SHA1

    03bc9f99fd612902397c09018160430abf83a24a

  • SHA256

    0b721ea6660f2b466c2b6305bb10e44350ccd707251adf68861993308bcb80de

  • SHA512

    aec38d14351319a9846fa0a369b32be2a75041a22b5e2174af4b3f656d74c10f05c5529eb43542568c4d655f5c0f82206fed5ce218513a1a79b6a6c9b3821da0

  • SSDEEP

    98304:JdByXcdnlLwOrI5Vfeg91hZOhkRpsinjt:Jdien+OrFuBR6ct

Score
10/10

Malware Config

Targets

    • Target

      0b721ea6660f2b466c2b6305bb10e44350ccd707251adf68861993308bcb80de

    • Size

      3.6MB

    • MD5

      2aacbf5af7500bef2245f2a6b7dfecf2

    • SHA1

      03bc9f99fd612902397c09018160430abf83a24a

    • SHA256

      0b721ea6660f2b466c2b6305bb10e44350ccd707251adf68861993308bcb80de

    • SHA512

      aec38d14351319a9846fa0a369b32be2a75041a22b5e2174af4b3f656d74c10f05c5529eb43542568c4d655f5c0f82206fed5ce218513a1a79b6a6c9b3821da0

    • SSDEEP

      98304:JdByXcdnlLwOrI5Vfeg91hZOhkRpsinjt:Jdien+OrFuBR6ct

    Score
    10/10
    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Matrix ATT&CK v13

Execution

Scheduled Task/Job

1
T1053

Persistence

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Registry Run Keys / Startup Folder

1
T1547.001

Scheduled Task/Job

1
T1053

Defense Evasion

Hide Artifacts

1
T1564

Hidden Files and Directories

1
T1564.001

Modify Registry

2
T1112

Tasks