General

  • Target
    process_lasso_18.2.2.10.zip
  • Size 5.2MB
  • Sample260708-yz6lsahs4w
  • SHA256 08012f57f250c20d0f0c42af66e15aa76401b7db20fbafa218fe0f7be7a49251
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      process_lasso_18.2.2.10.zip
    • Size 5.2MB
    • SHA256 08012f57f250c20d0f0c42af66e15aa76401b7db20fbafa218fe0f7be7a49251
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    1/10
    • Target
      Process Lasso 18.2.2.10.exe
    • Size 5.2MB
    • SHA256 0865c180bd4ab47e5311d46b069bbf66dc16388f2775c0a5b7d3e8381b20b430
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Target
      _Silent Install.cmd
    • Size 1KB
    • SHA256 6601cbe618dd90ef2daf02fb3fd41b492ea8b2afa2b234d3b7f483c432e4d78d
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Loads dropped DLL

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      _Unpack Portable.cmd
    • Size 1KB
    • SHA256 7256488f34caa5538294556b0b728e291cbe635f8d3cc6cd8195ad4bef1f782d
    • MD5 SHA1 SHA512 TLSH
    Score
    7/10
    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks