General

  • Target
    zkm_obf_pack.zip
  • Size 8.8MB
  • Sample260709-a6d84sb17v
  • SHA256 9eea5f8baf2511ed25a5d2663f749c032c0717570b9a29be6617cd671ec4c948
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      [email protected]
    • Size 18.2MB
    • SHA256 2baf1e78b91af12c0253cbb1b4a23afb2553bcb343c9888bc585a5449edfe81a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      obfuscate.bat
    • Size 137B
    • SHA256 5aa608c5c61e6a2e72381b2d2ca9f04e6a0f0e1fc4fda918f36ea9cf4b3deb6e
    • MD5 SHA1 SHA512 TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks