General

  • Target
    vanity-manualmap.exe
  • Size 1.7MB
  • Sample261006-wwfvvaev8k
  • SHA256 c07eb373b8b96704b5b1a5a3025f895abcf3dbf615b1aea75b8b50988db8b4cc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      vanity-manualmap.exe
    • Size 1.7MB
    • SHA256 c07eb373b8b96704b5b1a5a3025f895abcf3dbf615b1aea75b8b50988db8b4cc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Executes a file named after a Windows system binary

      The file runs from a user directory while carrying the name of an executable that normally only exists in System32.

    • Executes dropped EXE

    • Adds Run key to start application

MITRE ATT&CK Enterprise v16

Tasks