General

  • Target

    MedalSetup.MjcyMzQyODY3LDEsbm9yZWY=.exe

  • Size

    143.6MB

  • Sample

    240925-3yda3axhpd

  • MD5

    710c36ecb04ca9c48ed190a4e394bb8a

  • SHA1

    455ec60b5e579df028cfe74cd58f753e1f473eec

  • SHA256

    3c5374b59d9138e20ceaf7f1763122d73280568e61d6884df924881f9a4ad576

  • SHA512

    f5954e96b550009e7b8b5258920479a68c50fe8b834aed98c53fe9649cf3593aba59bb50d0046231e705cace5eb31bab887a941acda8ff9a5fad4435124d08c7

  • SSDEEP

    3145728:VNkfElKqPlhx65Rf+seBcAGxQFbd2NEeWx++s/FbZzruCnPB:Vkx2lhgaGxsRCWx+n/Foe5

Malware Config

Targets

    • Target

      MedalSetup.MjcyMzQyODY3LDEsbm9yZWY=.exe

    • Size

      143.6MB

    • MD5

      710c36ecb04ca9c48ed190a4e394bb8a

    • SHA1

      455ec60b5e579df028cfe74cd58f753e1f473eec

    • SHA256

      3c5374b59d9138e20ceaf7f1763122d73280568e61d6884df924881f9a4ad576

    • SHA512

      f5954e96b550009e7b8b5258920479a68c50fe8b834aed98c53fe9649cf3593aba59bb50d0046231e705cace5eb31bab887a941acda8ff9a5fad4435124d08c7

    • SSDEEP

      3145728:VNkfElKqPlhx65Rf+seBcAGxQFbd2NEeWx++s/FbZzruCnPB:Vkx2lhgaGxsRCWx+n/Foe5

    • Adds Run key to start application

    • Command and Scripting Interpreter: PowerShell

      Run Powershell to get system information.

    • Enumerates processes with tasklist

MITRE ATT&CK Enterprise v15

Tasks