General

  • Target
    _4f0925945aedb397ad3cbdd0e9b9a3ebf96d64c242699a971c2c016636383569.exe
  • Size 1.1MB
  • Sample260702-tk9mnsht9z
  • SHA256 4f0925945aedb397ad3cbdd0e9b9a3ebf96d64c242699a971c2c016636383569
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      _4f0925945aedb397ad3cbdd0e9b9a3ebf96d64c242699a971c2c016636383569.exe
    • Size 1.1MB
    • SHA256 4f0925945aedb397ad3cbdd0e9b9a3ebf96d64c242699a971c2c016636383569
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Adds Run key to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v16

Tasks