General

  • Target
    svt.exe
  • Size 4.5MB
  • Sample261027-pxhmhatyct
  • SHA256 3723998a293f21bebfbd405bfa55c9eeb07e6587d330a78186e375a8e596a35e
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      svt.exe
    • Size 4.5MB
    • SHA256 3723998a293f21bebfbd405bfa55c9eeb07e6587d330a78186e375a8e596a35e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Drops file in Drivers directory

    • Executes dropped EXE

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks