General

  • Target

    aa9a7552d2dc7d257186c7c4826009a3ac0e900c2099bed4d5c7f165de38f0b2.exe

  • Size

    567KB

  • Sample

    241113-hh3wkaxelk

  • MD5

    6c805ca0c6a09864a41c205dab6c6cd0

  • SHA1

    55a36c821e7b20a83db84f509f74cc9e6c68e737

  • SHA256

    aa9a7552d2dc7d257186c7c4826009a3ac0e900c2099bed4d5c7f165de38f0b2

  • SHA512

    5eaff51896b0247c2d8fc767b935fcc1823ce7f88070c30701c4c035c561dc0400620d0fc6f101f39986fdba7d2045d34ee222f204b318fc3d5d8c1726c5bf24

  • SSDEEP

    384:PJG14lR/NpKAN+UJfo8vJh/7neuwyv3ZUKcreuDreuwyv3ZUKcreuDL:RFtFe8vJtDeunUreufeunUreuX

Malware Config

Targets

    • Target

      aa9a7552d2dc7d257186c7c4826009a3ac0e900c2099bed4d5c7f165de38f0b2.exe

    • Size

      567KB

    • MD5

      6c805ca0c6a09864a41c205dab6c6cd0

    • SHA1

      55a36c821e7b20a83db84f509f74cc9e6c68e737

    • SHA256

      aa9a7552d2dc7d257186c7c4826009a3ac0e900c2099bed4d5c7f165de38f0b2

    • SHA512

      5eaff51896b0247c2d8fc767b935fcc1823ce7f88070c30701c4c035c561dc0400620d0fc6f101f39986fdba7d2045d34ee222f204b318fc3d5d8c1726c5bf24

    • SSDEEP

      384:PJG14lR/NpKAN+UJfo8vJh/7neuwyv3ZUKcreuDreuwyv3ZUKcreuDL:RFtFe8vJtDeunUreufeunUreuX

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • Disables Task Manager via registry modification

    • Adds Run key to start application

    • Modifies WinLogon

    • Drops file in System32 directory

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v15

Tasks