General

  • Target

    WallsOfYogurt.exe

  • Size

    88KB

  • Sample

    240607-r5f5rahh6v

  • MD5

    074d5e61f23923e1f8b26af750942941

  • SHA1

    7283e2b8bdd74f5c720c8366c85cc964879c3d04

  • SHA256

    1bf148063f03ffd84fb127dc4ebcde65661853f53c52457bd359d6e008d23a41

  • SHA512

    5a75da54901d78d0c1aac959536f8c892d76a86000b56109138ec7269cf94606387acee471c354733a12c5299c407cf58a4440dc232b909ae1796b68d963f118

  • SSDEEP

    1536:a2COJNrEUXboXRim//2rfJAnWhLzEXEhzIcg4/EIyUIgcwVcl:TC0EUXYRixyW+XEhzv7EIugcqY

Malware Config

Targets

    • Target

      WallsOfYogurt.exe

    • Size

      88KB

    • MD5

      074d5e61f23923e1f8b26af750942941

    • SHA1

      7283e2b8bdd74f5c720c8366c85cc964879c3d04

    • SHA256

      1bf148063f03ffd84fb127dc4ebcde65661853f53c52457bd359d6e008d23a41

    • SHA512

      5a75da54901d78d0c1aac959536f8c892d76a86000b56109138ec7269cf94606387acee471c354733a12c5299c407cf58a4440dc232b909ae1796b68d963f118

    • SSDEEP

      1536:a2COJNrEUXboXRim//2rfJAnWhLzEXEhzIcg4/EIyUIgcwVcl:TC0EUXYRixyW+XEhzv7EIugcqY

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Writes to the Master Boot Record (MBR)

      Bootkits write to the MBR to gain persistence at a level below the operating system.

MITRE ATT&CK Enterprise v15

Tasks