General
-
Target
Yeni Metin Belgesi.txt
-
Size
291B
-
Sample
240810-rm83taxcjd
-
MD5
52c09c4263bea75ba107ddee011dec3e
-
SHA1
5925eb24e4da9844a7a351f6cee35456bca32edb
-
SHA256
b516e5cab2b9dd04b6621eae5f31e614e85c62a6587119b949296c21ad4a9835
-
SHA512
855bf4d39541bebd23c6e7380d9f35c8cfdb5f9b260c48d24d1fb3f819c5ccc82874a00efea2dce31175d231cf6e0875ef2f319aea3e1c8304c33282020c5ea3
Static task
static1
Behavioral task
behavioral1
Sample
Yeni Metin Belgesi.txt
Resource
win11-20240802-en
Malware Config
Targets
-
-
Target
Yeni Metin Belgesi.txt
-
Size
291B
-
MD5
52c09c4263bea75ba107ddee011dec3e
-
SHA1
5925eb24e4da9844a7a351f6cee35456bca32edb
-
SHA256
b516e5cab2b9dd04b6621eae5f31e614e85c62a6587119b949296c21ad4a9835
-
SHA512
855bf4d39541bebd23c6e7380d9f35c8cfdb5f9b260c48d24d1fb3f819c5ccc82874a00efea2dce31175d231cf6e0875ef2f319aea3e1c8304c33282020c5ea3
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks for any installed AV software in registry
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in System32 directory
-
Enumerates processes with tasklist
-
MITRE ATT&CK Enterprise v15
Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
1SIP and Trust Provider Hijacking
1