General

  • Target

    7500f9e8568184afab30645d9fb0d18cdb4100fb.ico

  • Size

    766B

  • Sample

    240806-yfa1rsscjf

  • MD5

    005743f895b3141ff7226704cd9be987

  • SHA1

    7500f9e8568184afab30645d9fb0d18cdb4100fb

  • SHA256

    81729c8ddbfc0a5854a78b3be8ff63cc5658c24a1921b997a15c2597a52e1520

  • SHA512

    2e89978c16851fbcd61b2c2d6b289b9cf084796a5ba44f202d18cc39b054a397b619252f3e8127b7a6476e62ee9996d1fa41863d3613e53a15fa0d6d7bfb0686

Malware Config

Targets

    • Target

      7500f9e8568184afab30645d9fb0d18cdb4100fb.ico

    • Size

      766B

    • MD5

      005743f895b3141ff7226704cd9be987

    • SHA1

      7500f9e8568184afab30645d9fb0d18cdb4100fb

    • SHA256

      81729c8ddbfc0a5854a78b3be8ff63cc5658c24a1921b997a15c2597a52e1520

    • SHA512

      2e89978c16851fbcd61b2c2d6b289b9cf084796a5ba44f202d18cc39b054a397b619252f3e8127b7a6476e62ee9996d1fa41863d3613e53a15fa0d6d7bfb0686

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Detected potential entity reuse from brand steam.

MITRE ATT&CK Enterprise v15

Tasks