General

  • Target
    SecurityHealthSystray.exe
  • Size 32.4MB
  • Sample260723-lp3e6aveqb
  • SHA256 4754faa1aa672e3a89a6cfdef2ee217c7bdbc7bdf9e4c89d2d555331063107e1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      SecurityHealthSystray.exe
    • Size 32.4MB
    • SHA256 4754faa1aa672e3a89a6cfdef2ee217c7bdbc7bdf9e4c89d2d555331063107e1
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Loads dropped DLL

    • Command and Scripting Interpreter: PowerShell

      Using powershell.exe command.

MITRE ATT&CK Enterprise v16

Tasks