General
-
Target
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3
-
Size
2.7MB
-
Sample
201112-4mpn36af86
-
MD5
6abb5ce814ff591032863b4359b64f58
-
SHA1
b45826c25ea1c42f651c9ab90930a541a7c7761c
-
SHA256
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3
-
SHA512
95c17f3d3879d18856c5bb8dd419782824182d37d45c3cb8aadad510e53c2090f236528877a83f29dedd5672868494de7529d9dd0c9da66b4b1c3f1744428ba2
Static task
static1
Behavioral task
behavioral1
Sample
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3.exe
Resource
win10v20201028
Malware Config
Targets
-
-
Target
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3
-
Size
2.7MB
-
MD5
6abb5ce814ff591032863b4359b64f58
-
SHA1
b45826c25ea1c42f651c9ab90930a541a7c7761c
-
SHA256
66115617b7b4fe181ab03f86b84a2141267f4e646a005eb0ae4195645bab7ce3
-
SHA512
95c17f3d3879d18856c5bb8dd419782824182d37d45c3cb8aadad510e53c2090f236528877a83f29dedd5672868494de7529d9dd0c9da66b4b1c3f1744428ba2
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-