General

  • Target
    a10bfc5fd2fe6fdfc296bf558f1081e8192908ab1ae5ae1605cc17e1d434ffd5
  • Size 81.4MB
  • Sample260722-r2q6jsbl3v
  • SHA256 a10bfc5fd2fe6fdfc296bf558f1081e8192908ab1ae5ae1605cc17e1d434ffd5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      a10bfc5fd2fe6fdfc296bf558f1081e8192908ab1ae5ae1605cc17e1d434ffd5
    • Size 81.4MB
    • SHA256 a10bfc5fd2fe6fdfc296bf558f1081e8192908ab1ae5ae1605cc17e1d434ffd5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Adds Run key to start application

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Suspicious use of NtCreateThreadExHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks