General
-
Target
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6
-
Size
232KB
-
Sample
201108-qmvjln3yka
-
MD5
0d6a427091daa2586927f20761f4d620
-
SHA1
816a5c6adf8d9fa6bed7ec862d7082cdcb1c2133
-
SHA256
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6
-
SHA512
050597152b50836d465a81dfbf3dd6ab2bcf1d8657ecea425d9888da7304b8f632ab3c8220435538108da7bbab31e71cc9ab3530ab4c073d4b515cdbf84a51de
Static task
static1
Behavioral task
behavioral1
Sample
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6
-
Size
232KB
-
MD5
0d6a427091daa2586927f20761f4d620
-
SHA1
816a5c6adf8d9fa6bed7ec862d7082cdcb1c2133
-
SHA256
7395e621436ad8035110faa105be92fe3155804d9c3900591605c4937e8566e6
-
SHA512
050597152b50836d465a81dfbf3dd6ab2bcf1d8657ecea425d9888da7304b8f632ab3c8220435538108da7bbab31e71cc9ab3530ab4c073d4b515cdbf84a51de
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-