Resubmissions

25/06/2024, 19:22

240625-x3d59szhqm 1

25/06/2024, 19:21

240625-x258cszhpk 1

19/06/2024, 20:55

240619-zqt23awapq 6

General

  • Target

    midnight.exe

  • Size

    18.8MB

  • Sample

    240619-zqt23awapq

  • MD5

    fc550461fe770b0de1846f381e424f3e

  • SHA1

    b32198072ae328ec1a44ca521c0775d7a6e870b8

  • SHA256

    7d69b0d2d4faa7ffd46cc908ca441e69814c82e10b95590f60a05853d657aaf0

  • SHA512

    6e53c445b6c4135652f6b649c20f464bcd70c5f131061779661e432ec1b2d8c53023d3796f08fbd21798ea2eaaf4da682173d35559d513c6eb022601c9234c47

  • SSDEEP

    393216:ieOMFdSGA5YMeU0hsRGUCTRADYT0RBCofgMDyYCKZ9oWKa6wt3b6nXvN:ieOiSGAGfU0hsRGU2AUgCofgMDyYCK58

Malware Config

Targets

    • Target

      midnight.exe

    • Size

      18.8MB

    • MD5

      fc550461fe770b0de1846f381e424f3e

    • SHA1

      b32198072ae328ec1a44ca521c0775d7a6e870b8

    • SHA256

      7d69b0d2d4faa7ffd46cc908ca441e69814c82e10b95590f60a05853d657aaf0

    • SHA512

      6e53c445b6c4135652f6b649c20f464bcd70c5f131061779661e432ec1b2d8c53023d3796f08fbd21798ea2eaaf4da682173d35559d513c6eb022601c9234c47

    • SSDEEP

      393216:ieOMFdSGA5YMeU0hsRGUCTRADYT0RBCofgMDyYCKZ9oWKa6wt3b6nXvN:ieOiSGAGfU0hsRGU2AUgCofgMDyYCK58

    • Adds Run key to start application

    • Event Triggered Execution: Component Object Model Hijacking

      Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.

MITRE ATT&CK Enterprise v15

Tasks