General
-
Target
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1
-
Size
161KB
-
Sample
210518-cyggkdydxs
-
MD5
427aa518b17bac4f95e2bee7085fc770
-
SHA1
34dadc42b1ad8861dd2067e5912953f2eefa6d19
-
SHA256
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1
-
SHA512
275a60c6cbeded188b039c6f9928cab43121d5785088a3339fd475269b3bb2a570e052f80ae2473b569f8fba3f8ef71b1b27b69cfaf4e4ca28110120b7cdc286
Static task
static1
Behavioral task
behavioral1
Sample
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1.exe
Resource
win10v20210410
Malware Config
Targets
-
-
Target
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1
-
Size
161KB
-
MD5
427aa518b17bac4f95e2bee7085fc770
-
SHA1
34dadc42b1ad8861dd2067e5912953f2eefa6d19
-
SHA256
fb25865818032120953e48a676ae5f4d2acf6c2dc8628b73bcc2edd8099d81f1
-
SHA512
275a60c6cbeded188b039c6f9928cab43121d5785088a3339fd475269b3bb2a570e052f80ae2473b569f8fba3f8ef71b1b27b69cfaf4e4ca28110120b7cdc286
Score10/10-
Modifies WinLogon for persistence
-
Modifies system executable filetype association
-
Drops file in Drivers directory
-
Sets service image path in registry
-
Adds Run key to start application
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Modifies WinLogon
-