General

  • Target
    monika-bootstrap.exe
  • Size 11.3MB
  • Sample260812-vqm7as1fla
  • SHA256 1f69470064a69e69d3f61f39cc29eb64a1675575f1926777acecf0d26fca7b1a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      monika-bootstrap.exe
    • Size 11.3MB
    • SHA256 1f69470064a69e69d3f61f39cc29eb64a1675575f1926777acecf0d26fca7b1a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Command and Scripting Interpreter: PowerShell

      Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    • Executes dropped EXE

    • Discovers running processes

      Running process information can be used to identify security tools or plan follow-on actions.

MITRE ATT&CK Enterprise v16

Tasks