General
-
Target
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85
-
Size
1.2MB
-
Sample
210830-jhx6n123v2
-
MD5
a093797edf6c04f4639d7001a7996861
-
SHA1
18e26ab3d87ff521756f3fcb2a9a577bea05f9ff
-
SHA256
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85
-
SHA512
e1c607e493ea35123be937ea619aa179dc7c8467b0c2c06577279c5a1858ff5f4ee3907078264bfb861540732aaa2157b2b00803634fe1cc33930be9c6ac384f
Static task
static1
Behavioral task
behavioral1
Sample
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85.exe
Resource
win7v20210408
Behavioral task
behavioral2
Sample
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85.exe
Resource
win10v20210408
Malware Config
Targets
-
-
Target
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85
-
Size
1.2MB
-
MD5
a093797edf6c04f4639d7001a7996861
-
SHA1
18e26ab3d87ff521756f3fcb2a9a577bea05f9ff
-
SHA256
70fb7f4353898eb02416d7950e2a2895eab599c670faa7f84e2fa997d0a8da85
-
SHA512
e1c607e493ea35123be937ea619aa179dc7c8467b0c2c06577279c5a1858ff5f4ee3907078264bfb861540732aaa2157b2b00803634fe1cc33930be9c6ac384f
Score10/10-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-