General

  • Target
    New folder.zip
  • Size 31.4MB
  • Sample260702-ydqcnsdv2s
  • SHA256 e715bfeb2556d053f4acb36c6bd12d86321f44b5c58894ff0b48fcab9add1598
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      New folder/cimgui.dll
    • Size 1.4MB
    • SHA256 60ec992bcebd354d59f235ed97cdc3b0eea62c2def53c4a71f22937e500fa80b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      New folder/norecoil.exe
    • Size 71.1MB
    • SHA256 f42a887bc3019089fd50ba53891db6ca010abe85f507ec85de77fe20dd662ac6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10

MITRE ATT&CK Enterprise v16

Tasks