General

  • Target
    DefiantTemp.exe
  • Size 651KB
  • Sample260815-kml5qatsbs
  • SHA256 f581023878df5abbece07275e0556e5124928e943f926486ba35d01f274979b7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10

Malware Config

Targets

    • Target
      DefiantTemp.exe
    • Size 651KB
    • SHA256 f581023878df5abbece07275e0556e5124928e943f926486ba35d01f274979b7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    • Sets service image path in registry

      This determines the executable launched when a service starts. It can be used to establish persistence.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

MITRE ATT&CK Enterprise v16

Tasks