General

  • Target
    7777.exe
  • Size 639KB
  • Sample260731-265vlsam4s
  • SHA256 64a25f427f8a0e6eab5d113ce04cca4b5e30b60ae012aedb556d47ef8d92b668
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      7777.exe
    • Size 639KB
    • SHA256 64a25f427f8a0e6eab5d113ce04cca4b5e30b60ae012aedb556d47ef8d92b668
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Prevents Microsoft Defender from scanning certain paths by adding an exclusion.

      Uses the Powershell Add-MpPreference cmdlet to exclude paths from being scanned by Microsoft Defender.

    • Hide Artifacts: Hidden Window

      Windows that would typically be displayed when an application carries out an operation can be hidden.

    • Hide Artifacts: Hidden Files and Directories

MITRE ATT&CK Enterprise v16

Tasks