Resubmissions

04/11/2024, 01:58

241104-cd6trs1cql10

03/11/2024, 23:54

241103-3xzgxaydkp10

General

  • Target
    isisC2.exe
  • Size 25.0MB
  • Sample241104-cd6trs1cql
  • SHA256 aae708ff066deab34df7a07cd0da4cd449235ccd541f5030d4c0c6cd4ca3b758
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      isisC2.exe
    • Size 25.0MB
    • SHA256 aae708ff066deab34df7a07cd0da4cd449235ccd541f5030d4c0c6cd4ca3b758
    • MD5 SHA1 SHA512 SSDEEP
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Loads dropped DLL

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Enumerates processes with tasklist

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks