General

  • Target
    d1cf964d57c97796a8962facffc05ae588bfa73a96bddf1d81d00833eba87447
  • Size 1KB
  • Sample260818-dps8gsfb38
  • SHA256 d1cf964d57c97796a8962facffc05ae588bfa73a96bddf1d81d00833eba87447
  • MD5 SHA1 SHA512 TLSH

Malware Config

Targets

    • Target
      d1cf964d57c97796a8962facffc05ae588bfa73a96bddf1d81d00833eba87447
    • Size 1KB
    • SHA256 d1cf964d57c97796a8962facffc05ae588bfa73a96bddf1d81d00833eba87447
    • MD5 SHA1 SHA512 TLSH
    • Detects suspicious XORed keyword - Mozilla/5.0

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

    • Deletes itself

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v16

Tasks