General
-
Target
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3
-
Size
251KB
-
Sample
201111-dhrdwd18ba
-
MD5
0fb89311917a7c35fe6a9937df19c35d
-
SHA1
09b8dfad8d91e6127795b6a143bf1802609d7900
-
SHA256
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3
-
SHA512
f0e1c75a56d8b1b5cf33151ccdf7c6d7eaf5bc281e16c20b0f55a9dc847b2fa02a6ff6f990dff7bd534eac78b5957fe241254f40b4287df9bf676baf8de4805c
Static task
static1
Behavioral task
behavioral1
Sample
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3
-
Size
251KB
-
MD5
0fb89311917a7c35fe6a9937df19c35d
-
SHA1
09b8dfad8d91e6127795b6a143bf1802609d7900
-
SHA256
e8f040869e00b0d4dc00ddc6be5e0aaaaca6a700e16a1825592fc9924fee17e3
-
SHA512
f0e1c75a56d8b1b5cf33151ccdf7c6d7eaf5bc281e16c20b0f55a9dc847b2fa02a6ff6f990dff7bd534eac78b5957fe241254f40b4287df9bf676baf8de4805c
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-