General
-
Target
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9
-
Size
1022KB
-
Sample
210517-7cc73kcbma
-
MD5
4009ccd36518a4aa9ac971315eebb318
-
SHA1
1a5ce4b3232dd3fa031a070e411a4b1ab5694a9d
-
SHA256
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9
-
SHA512
3591fcf7fc209aa3d670f0793a720f2953a5d5ae052e0980d14f04deb7e7b9b46f810842b985af0b52f177fad85e8de21aaa38bf5d0d4a884827077c28fb6d35
Static task
static1
Behavioral task
behavioral1
Sample
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9.exe
Resource
win7v20210410
Behavioral task
behavioral2
Sample
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9.exe
Resource
win10v20210408
Malware Config
Targets
-
-
Target
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9
-
Size
1022KB
-
MD5
4009ccd36518a4aa9ac971315eebb318
-
SHA1
1a5ce4b3232dd3fa031a070e411a4b1ab5694a9d
-
SHA256
52bd34ab74c6274dafd0797350ac213ac2536e04d46c3d338e4c6007f0dc1ab9
-
SHA512
3591fcf7fc209aa3d670f0793a720f2953a5d5ae052e0980d14f04deb7e7b9b46f810842b985af0b52f177fad85e8de21aaa38bf5d0d4a884827077c28fb6d35
Score10/10-
Modifies WinLogon for persistence
-
Modifies system executable filetype association
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon
-