Overview

overview

8

Static

static

emotet_long_run

windows10_x64

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0502.gif

  • Size

    79B

  • Sample

    210205-7ymmpcfxv2

  • MD5

    718e76a5993202f7af0b052c36ab51f1

  • SHA1

    788828073ae092f42718065d2ddc5fb95127a543

  • SHA256

    1d110edb099c9911418f7bd8698a4d7506dea9b6f6cdbe01db43768fea1f938d

  • SHA512

    7184dff3f19117a678670717c2f0ff6106b5d518bb2ddb39036cee0ef935b9ed3ef1d3e938249095498d28e57dad212a673fc6b2a875b50360b77298f9077ce0

Score
8/10
bootkitransomware

Malware Config

Targets

    • Target

      0502.gif

    • Size

      79B

    • MD5

      718e76a5993202f7af0b052c36ab51f1

    • SHA1

      788828073ae092f42718065d2ddc5fb95127a543

    • SHA256

      1d110edb099c9911418f7bd8698a4d7506dea9b6f6cdbe01db43768fea1f938d

    • SHA512

      7184dff3f19117a678670717c2f0ff6106b5d518bb2ddb39036cee0ef935b9ed3ef1d3e938249095498d28e57dad212a673fc6b2a875b50360b77298f9077ce0

    Score
    8/10
    bootkitransomware

    • Modifies WinLogon to allow AutoLogon

      Enables rebooting of the machine without requiring login credentials.

      ransomwarebootkit
    behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

2
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks