Overview

overview

7

Static

static

1

winlog.exe

windows7_x64

7

winlog.exe

windows10_x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    winlog.exe

  • Size

    441KB

  • Sample

    200707-31snljclj2

  • MD5

    206fa6f9e31c508d79a4677d679730f2

  • SHA1

    222ddef076c12e0a141c1f4dbf0190a9bab5b811

  • SHA256

    c382d2d33c7036ac95058ef7ab3305b3234394428c28786d8c35f4a049047653

  • SHA512

    b067802014dad290db64d00f2a900b57789c71b78755dd73a855a081625488640d1390b319f9d3e19f09a2ca0cb252e19e61c33a384f482ad567e0a6a5251e37

Score
7/10

Malware Config

Targets

    • Target

      winlog.exe

    • Size

      441KB

    • MD5

      206fa6f9e31c508d79a4677d679730f2

    • SHA1

      222ddef076c12e0a141c1f4dbf0190a9bab5b811

    • SHA256

      c382d2d33c7036ac95058ef7ab3305b3234394428c28786d8c35f4a049047653

    • SHA512

      b067802014dad290db64d00f2a900b57789c71b78755dd73a855a081625488640d1390b319f9d3e19f09a2ca0cb252e19e61c33a384f482ad567e0a6a5251e37

    Score
    7/10

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks