General

  • Target
    7c657dff35ee4d5fa54ea41d02e78f0754a245a1f6f6a8e12ba42e6fa1d70444
  • Size 1.8MB
  • Sample200706-tyanm3kelx
  • SHA256 7c657dff35ee4d5fa54ea41d02e78f0754a245a1f6f6a8e12ba42e6fa1d70444
  • MD5 SHA1 SHA512
Score
10/10

Malware Config

Targets

    • Target
      7c657dff35ee4d5fa54ea41d02e78f0754a245a1f6f6a8e12ba42e6fa1d70444
    • Size 1.8MB
    • SHA256 7c657dff35ee4d5fa54ea41d02e78f0754a245a1f6f6a8e12ba42e6fa1d70444
    • MD5 SHA1 SHA512
    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

    • Modifies the visibility of hidden or system files

    • Loads dropped DLL

    • Adds Run entry to start application

    • Suspicious use of SetThreadContext

MITRE ATT&CK Enterprise v6

Tasks