General

  • Target
    slyshexe.zip
  • Size 7.8MB
  • Sample260709-g3yxnset6s
  • SHA256 ee3ca9b48ed069f12caa14eecc93b0aa369243def94fdf27390c2a2cb8775da5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Big52UTF8.exe
    • Size 390KB
    • SHA256 afbdc4ed2c2e16c715829f65a1c90cf9c18d3ed4c414f1e57a8e1d0f5d5b0bf9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      FtpSlysh.exe
    • Size 554KB
    • SHA256 ebba7254bcb4953bae17c4f0f82df7b0f753f901f5f0906912aa579052820ec4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    • Target
      sly.exe
    • Size 47.7MB
    • SHA256 705a4dfecca00b7bc076ae553a56678fb88714d0eb20e0a64a9030df8a49924b
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Target
      taxslysh.doc
    • Size 796KB
    • SHA256 bb00c6e80f0651220f587e06166eee52227a5b1126dec1bdb5d9daa03d656e7c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

MITRE ATT&CK Enterprise v16

Tasks