General

  • Target
    ut_br_play_as_sans.zip
  • Size 3.4MB
  • Sample260709-dg65dab17j
  • SHA256 fd7a05e266825cc2a538adfc1505fab3abe22a211b9eba26678186ec98de58b6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      ut_br_play_as_sans.zip
    • Size 3.4MB
    • SHA256 fd7a05e266825cc2a538adfc1505fab3abe22a211b9eba26678186ec98de58b6
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      DeltaPatcher.exe
    • Size 5.2MB
    • SHA256 348b41189b914caa155b65424df082d9e585dd46d7abca7acada44150b35a04e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      README.txt
    • Size 1KB
    • SHA256 beaf0f40dff3b23cade916c507cd9480532ab283b086b17f9460a64baff433bb
    • MD5 SHA1 SHA512 TLSH
    Score
    1/10
    • Target
      UT BR Play as Sans.xdelta
    • Size 2.0MB
    • SHA256 ce4c4aa04684d1fbc9ae72ff8f763f2ff5696477f1f80477a02a52a04f99cb60
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10

MITRE ATT&CK Enterprise v16

Tasks