Resubmissions

10-08-2024 14:26

240810-rsc8bsxdnh 5

10-08-2024 14:19

240810-rm83taxcjd 7

General

  • Target

    Yeni Metin Belgesi.txt

  • Size

    291B

  • Sample

    240810-rm83taxcjd

  • MD5

    52c09c4263bea75ba107ddee011dec3e

  • SHA1

    5925eb24e4da9844a7a351f6cee35456bca32edb

  • SHA256

    b516e5cab2b9dd04b6621eae5f31e614e85c62a6587119b949296c21ad4a9835

  • SHA512

    855bf4d39541bebd23c6e7380d9f35c8cfdb5f9b260c48d24d1fb3f819c5ccc82874a00efea2dce31175d231cf6e0875ef2f319aea3e1c8304c33282020c5ea3

Malware Config

Targets

    • Target

      Yeni Metin Belgesi.txt

    • Size

      291B

    • MD5

      52c09c4263bea75ba107ddee011dec3e

    • SHA1

      5925eb24e4da9844a7a351f6cee35456bca32edb

    • SHA256

      b516e5cab2b9dd04b6621eae5f31e614e85c62a6587119b949296c21ad4a9835

    • SHA512

      855bf4d39541bebd23c6e7380d9f35c8cfdb5f9b260c48d24d1fb3f819c5ccc82874a00efea2dce31175d231cf6e0875ef2f319aea3e1c8304c33282020c5ea3

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks for any installed AV software in registry

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops file in System32 directory

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks