General

  • Target

    MocuMocuDance.exe

  • Size

    2.3MB

  • Sample

    240814-alvqcsxbpm

  • MD5

    0fad7952642018f21310fb68a11bbcf7

  • SHA1

    0d963e6636f48e600be986f0007ccc91fbbc03e5

  • SHA256

    e64b51a62957dccdaeb1a02dd812aaa56162d2c1d17eebc21cfcf5f35160757a

  • SHA512

    df86d7dcbdaeb54b36fd0398bdda2e76bda9292b9805ef5d579255596f3e3f0e639ed4b0929c5930a1ad3a967606f708dd3487f059e189c263cfd2263a3fc62c

  • SSDEEP

    49152:JOgAYoZiRUwWF5PcGuqsLrTrhKc8jy/j:HjoZiUwqPcGu7h

Malware Config

Targets

    • Target

      MocuMocuDance.exe

    • Size

      2.3MB

    • MD5

      0fad7952642018f21310fb68a11bbcf7

    • SHA1

      0d963e6636f48e600be986f0007ccc91fbbc03e5

    • SHA256

      e64b51a62957dccdaeb1a02dd812aaa56162d2c1d17eebc21cfcf5f35160757a

    • SHA512

      df86d7dcbdaeb54b36fd0398bdda2e76bda9292b9805ef5d579255596f3e3f0e639ed4b0929c5930a1ad3a967606f708dd3487f059e189c263cfd2263a3fc62c

    • SSDEEP

      49152:JOgAYoZiRUwWF5PcGuqsLrTrhKc8jy/j:HjoZiUwqPcGu7h

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks