General

  • Target

    PotatoGraphics.exe

  • Size

    64.1MB

  • Sample

    241126-a2zn9avmcz

  • MD5

    f73b7791baeb98ce6c6f6b7f82e1792d

  • SHA1

    3b1620b7a105b3ffa6c248f020cbee1119211952

  • SHA256

    7533c3d88c4ff72273d982f53faf9cfa04a7ca51dae4c481512663514872d21d

  • SHA512

    dc4cdca7ece2beb159bb1ed316e61b4334931307351ca3799593c47dc706164454e874aa23ffcbd2c8787ab7d2456068c3bc054800d6d727bec8ad700a4d321c

  • SSDEEP

    1572864:8Wl164XEQCrwvXoTXkcpDNNEfxPJc9XIr1lAZ1POJC6X/1B+i3j:8y640cAQ656xPJc9k1lfhWiT

Malware Config

Targets

    • Target

      PotatoGraphics.exe

    • Size

      64.1MB

    • MD5

      f73b7791baeb98ce6c6f6b7f82e1792d

    • SHA1

      3b1620b7a105b3ffa6c248f020cbee1119211952

    • SHA256

      7533c3d88c4ff72273d982f53faf9cfa04a7ca51dae4c481512663514872d21d

    • SHA512

      dc4cdca7ece2beb159bb1ed316e61b4334931307351ca3799593c47dc706164454e874aa23ffcbd2c8787ab7d2456068c3bc054800d6d727bec8ad700a4d321c

    • SSDEEP

      1572864:8Wl164XEQCrwvXoTXkcpDNNEfxPJc9XIr1lAZ1POJC6X/1B+i3j:8y640cAQ656xPJc9k1lfhWiT

    • Loads dropped DLL

    • Indicator Removal: File Deletion

      Adversaries may delete files left behind by the actions of their intrusion activity.

MITRE ATT&CK Enterprise v15

Tasks