General

  • Target
    Loader.exe
  • Size 923KB
  • Sample260710-13b8fsb17r
  • SHA256 5d2d477d314212964e4c62f28d7ab821b63dfa453228b48ef9aeb525a4ec17d9
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      Loader.exe
    • Size 923KB
    • SHA256 5d2d477d314212964e4c62f28d7ab821b63dfa453228b48ef9aeb525a4ec17d9
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Downloads MZ/PE file

    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

MITRE ATT&CK Enterprise v16

Tasks