General

  • Target
    a2af5120e94f06de9411097540a5cd822a0a9a522e47e26473f293556f7afcda
  • Size 83KB
  • Sample260831-vbk4dsdl4z
  • SHA256 a2af5120e94f06de9411097540a5cd822a0a9a522e47e26473f293556f7afcda
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      a2af5120e94f06de9411097540a5cd822a0a9a522e47e26473f293556f7afcda
    • Size 83KB
    • SHA256 a2af5120e94f06de9411097540a5cd822a0a9a522e47e26473f293556f7afcda
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies WinLogon for persistence

    • Modifies visibility of hidden/system files in Explorer

    • Boot or Logon Autostart Execution: Active Setup

      Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks