General

  • Target
    Direct_Remit_Copy_jpg.7z
  • Size 100KB
  • Sample260702-pgcfjshz6w
  • SHA256 8dfb0770ad7bd7778ad09c90cfc8a27cb29a988ebadc4bb18b011780ff6a72fa
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Direct_Remit_Copy_jpg.js
    • Size 769KB
    • SHA256 3cf9623e55d1e1758d476eb5e52a390c0a1ec8fc752bd00d12980a597a00d31b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Badlisted process makes network request

      Network request originating from process or tool commonly abused by malware.

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks