Resubmissions

15-06-2024 02:24

240615-cvvg3awdrh 8

15-06-2024 02:23

240615-cvhhhawdqe 1

19-04-2024 11:28

240419-nk1f4sbd3t 1

General

  • Target

    Screenshot 2023-04-05 205733.png

  • Size

    988KB

  • Sample

    240615-cvvg3awdrh

  • MD5

    a0be0a9db54292c543c556a73ff99276

  • SHA1

    8806ca4a27d2660c7b82e0f8d3950ec83195e61a

  • SHA256

    d42f66f231c143668166cb8d83c454f620e645f1ca38a9c2cf0e4868a08a5e25

  • SHA512

    ec3e6867e2ff28bfeb022fa87d0d01c741f62a035b9b5a12f62d49cd2e16fea724b4952dccef3a57723d398dd697c5b9b94c34fff4ba82102bcad620765d900d

  • SSDEEP

    24576:9yJxb+lpzRrJgbO8RiG9AXFIaBiVlTFXUSJp:eINyt98Iai9tp

Malware Config

Targets

    • Target

      Screenshot 2023-04-05 205733.png

    • Size

      988KB

    • MD5

      a0be0a9db54292c543c556a73ff99276

    • SHA1

      8806ca4a27d2660c7b82e0f8d3950ec83195e61a

    • SHA256

      d42f66f231c143668166cb8d83c454f620e645f1ca38a9c2cf0e4868a08a5e25

    • SHA512

      ec3e6867e2ff28bfeb022fa87d0d01c741f62a035b9b5a12f62d49cd2e16fea724b4952dccef3a57723d398dd697c5b9b94c34fff4ba82102bcad620765d900d

    • SSDEEP

      24576:9yJxb+lpzRrJgbO8RiG9AXFIaBiVlTFXUSJp:eINyt98Iai9tp

    • Downloads MZ/PE file

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Registers COM server for autorun

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Checks whether UAC is enabled

    • Checks system information in the registry

      System information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks