General

  • Target
    Madium-Installer.zip
  • Size 322KB
  • Sample260626-echrnahv9q
  • SHA256 2fe7e678e338a34f46c3c5f1bdee85db6deae26a6c18126670d05955fcf4c4e1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Madium/Madium-Installer.exe
    • Size 843KB
    • SHA256 5d48d810f20c0de47ccfc2e4abd74777f7540620b9b5e5c3057b45ab238ed23f
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks