General

  • Target
    0befde76298e1cd14983e1ed0c5858c29a46381f45592acfc9143deca6fc6ecb.zip
  • Size 17.0MB
  • Sample260712-xrrbfshw6s
  • SHA256 1af74308dd66155c314f086f7303d3542547b22458eb55d2ddd39786818b048e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      0befde76298e1cd14983e1ed0c5858c29a46381f45592acfc9143deca6fc6ecb.exe
    • Size 17.5MB
    • SHA256 0befde76298e1cd14983e1ed0c5858c29a46381f45592acfc9143deca6fc6ecb
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v16

Tasks