General
- Target 6c3e529d873cab916befa4fe2f36184a.exe
- Size 436KB
- Sample201111-8gksrcvgla
- SHA256 803d5b755bfb29e7fd30fe679ec21ccb1eb1ea89b19bbe1a989b4cf10d2ebca7
- MD5 6c3e529d873cab916befa4fe2f36184a
- SHA1 746eff99037cd5f4d3dd43e165ce4de57d65cb00
- SHA512 e3bd98870c68bbc63795c991eebaed7baa97233a2cce8f9f2c516ff5e3d204b5fc9913cbe7f31143c4b3d5a00a0c0d18de72ad0c58abc3f6992bc1ea94eeff9a
- MD5 SHA1 SHA512
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
6c3e529d873cab916befa4fe2f36184a.exe
Resource
win7v20201028
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
6c3e529d873cab916befa4fe2f36184a.exe
Resource
win10v20201028
0 signatures
0 seconds
Malware Config
Targets
-
- Target 6c3e529d873cab916befa4fe2f36184a.exe
- Size 436KB
- SHA256 803d5b755bfb29e7fd30fe679ec21ccb1eb1ea89b19bbe1a989b4cf10d2ebca7
- MD5 6c3e529d873cab916befa4fe2f36184a
- SHA1 746eff99037cd5f4d3dd43e165ce4de57d65cb00
- SHA512 e3bd98870c68bbc63795c991eebaed7baa97233a2cce8f9f2c516ff5e3d204b5fc9913cbe7f31143c4b3d5a00a0c0d18de72ad0c58abc3f6992bc1ea94eeff9a
- MD5 SHA1 SHA512
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Suspicious use of SetThreadContext