General
-
Target
58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f.zip
-
Size
36KB
-
Sample
200710-6z98jjfd7e
-
MD5
5e714ea32fcf89ddf60a9cfe986b64f0
-
SHA1
f7e86f937f32d7cba2f6efbf81ed1b82b81e1ad0
-
SHA256
81c864ff07c0f51fcf30f2955b3a5d37f0d0923ff9626b215501f8149b089972
-
SHA512
c28962b10a554ce4d93e7b5bb8bc3e89680e5d9d8f834f2cb93a1d8df761e1f15c533fbfc7fb9ba2aad596903e692cbe7e393f4d6be7625138954e19084943b8
Static task
static1
Behavioral task
behavioral1
Sample
58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f.exe
Resource
win7
Behavioral task
behavioral2
Sample
58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f.exe
Resource
win10v200430
Malware Config
Targets
-
-
Target
58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f.exe
-
Size
82KB
-
MD5
e01e11dca5e8b08fc8231b1cb6e2048c
-
SHA1
4983d07f004436caa3f10b38adacbba6a4ede01a
-
SHA256
58bfb9fa8889550d13f42473956dc2a7ec4f3abb18fd3faeaa38089d513c171f
-
SHA512
298bfb9fe55ddd80f1c6671622d7e9e865899a855b5bb8e0d85d8520160cedca6fd8bc72c9881925477bcab883bf6e6f4c69f997b774b74fe992e023a81269de
Score10/10-
Modifies WinLogon for persistence
-
Modifies boot configuration data using bcdedit
-
Blacklisted process makes network request
-
Executes dropped EXE
-
Drops startup file
-
Modifies WinLogon
-
Modifies service
-