General
-
Target
midnight.exe
-
Size
18.8MB
-
Sample
240619-zqt23awapq
-
MD5
fc550461fe770b0de1846f381e424f3e
-
SHA1
b32198072ae328ec1a44ca521c0775d7a6e870b8
-
SHA256
7d69b0d2d4faa7ffd46cc908ca441e69814c82e10b95590f60a05853d657aaf0
-
SHA512
6e53c445b6c4135652f6b649c20f464bcd70c5f131061779661e432ec1b2d8c53023d3796f08fbd21798ea2eaaf4da682173d35559d513c6eb022601c9234c47
-
SSDEEP
393216:ieOMFdSGA5YMeU0hsRGUCTRADYT0RBCofgMDyYCKZ9oWKa6wt3b6nXvN:ieOiSGAGfU0hsRGU2AUgCofgMDyYCK58
Static task
static1
Behavioral task
behavioral1
Sample
midnight.exe
Resource
win10-20240404-en
Malware Config
Targets
-
-
Target
midnight.exe
-
Size
18.8MB
-
MD5
fc550461fe770b0de1846f381e424f3e
-
SHA1
b32198072ae328ec1a44ca521c0775d7a6e870b8
-
SHA256
7d69b0d2d4faa7ffd46cc908ca441e69814c82e10b95590f60a05853d657aaf0
-
SHA512
6e53c445b6c4135652f6b649c20f464bcd70c5f131061779661e432ec1b2d8c53023d3796f08fbd21798ea2eaaf4da682173d35559d513c6eb022601c9234c47
-
SSDEEP
393216:ieOMFdSGA5YMeU0hsRGUCTRADYT0RBCofgMDyYCKZ9oWKa6wt3b6nXvN:ieOiSGAGfU0hsRGU2AUgCofgMDyYCK58
Score6/10-
Adds Run key to start application
-
Event Triggered Execution: Component Object Model Hijacking
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Event Triggered Execution
2Change Default File Association
1Component Object Model Hijacking
1