General

  • Target

    memreduct-3.4-setup.exe

  • Size

    309KB

  • Sample

    240610-zlbd6azbma

  • MD5

    0f74e88d113f46798dc0f5d69c26da2f

  • SHA1

    ace6920cd953bca45cb798672592ae7089d6d01d

  • SHA256

    a7ba8b9da0a1fdf7a886fe86b2ca55b4afe05d69b2c9c4d33b27d65986d6a033

  • SHA512

    6434786151677e3cfef57b2d7069dc37a4b4d08c8c7eb7e817d7a956517a9d298bc08b38f8342d91234a65979ade1898dfe79ae9cb218332d5496c1517c124ae

  • SSDEEP

    6144:4Ya6eFisfjzl/eP3OD8Jb+Wh1btdxlrgTM5onRIR7YdH3zfbv7cxQ1/C8z:4YgzjJWPe0+ybt+TMGnqR7YFfH+QFpz

Malware Config

Targets

    • Target

      memreduct-3.4-setup.exe

    • Size

      309KB

    • MD5

      0f74e88d113f46798dc0f5d69c26da2f

    • SHA1

      ace6920cd953bca45cb798672592ae7089d6d01d

    • SHA256

      a7ba8b9da0a1fdf7a886fe86b2ca55b4afe05d69b2c9c4d33b27d65986d6a033

    • SHA512

      6434786151677e3cfef57b2d7069dc37a4b4d08c8c7eb7e817d7a956517a9d298bc08b38f8342d91234a65979ade1898dfe79ae9cb218332d5496c1517c124ae

    • SSDEEP

      6144:4Ya6eFisfjzl/eP3OD8Jb+Wh1btdxlrgTM5onRIR7YdH3zfbv7cxQ1/C8z:4YgzjJWPe0+ybt+TMGnqR7YFfH+QFpz

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Legitimate hosting services abused for malware hosting/C2

    • Launch Agent

      Adversaries may create or modify launch agents to repeatedly execute malicious payloads as part of persistence.

MITRE ATT&CK Enterprise v15

Tasks