General

  • Target

    nigger.exe

  • Size

    10.1MB

  • Sample

    240930-r1kx5svcja

  • MD5

    6bba4d801c34ffb654b9a6b00f5dd2fb

  • SHA1

    085287cc542def54fe518c012085cb0dda517e57

  • SHA256

    444e524a7f5829a9ff3fd898dbf5f380bf7fb56e0ce02dceec4252eee2f01f01

  • SHA512

    665df9008d34f8ca291fce7eee940e9dcdf84ba4aff34b80b3af6dcd8132796bf1018a22aba1413a176de8bf43856871842f6714b449bd2b857e2fc0aa839368

  • SSDEEP

    1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVhpalk:UVqoCl/YgjxEufVU0TbTyDDalQlk

Malware Config

Targets

    • Target

      nigger.exe

    • Size

      10.1MB

    • MD5

      6bba4d801c34ffb654b9a6b00f5dd2fb

    • SHA1

      085287cc542def54fe518c012085cb0dda517e57

    • SHA256

      444e524a7f5829a9ff3fd898dbf5f380bf7fb56e0ce02dceec4252eee2f01f01

    • SHA512

      665df9008d34f8ca291fce7eee940e9dcdf84ba4aff34b80b3af6dcd8132796bf1018a22aba1413a176de8bf43856871842f6714b449bd2b857e2fc0aa839368

    • SSDEEP

      1536:UfsEqouTRcG/Mzvgf7xEuvnXNTRdUzwTekUOisZ1yDDajtXbVhpalk:UVqoCl/YgjxEufVU0TbTyDDalQlk

    • Modifies visiblity of hidden/system files in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks