General
- Target HEUR-Backdoor.Win32.Generic-90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c.exe
- Size 2.1MB
- Sample220831-ddx3asfhap
- SHA256 90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c
- MD5 e4311ab08f705b3b150e1be181c9e260
- SHA1 3c8cdf195e5d2ff97524c60edbcf7c1f4c58a87f
- SHA512 26ba5e2d8cf92aa5f4cf80021fe5d798ef92b529d4139d9b85de2d0cecdf3966257d9832466e7d08cb5f5d6494b465ef3988b4b444df4377f0723975cc62cb52
- SSDEEP 49152:smV2ApPmV2ApPmV2Ap/mV2ApPmV2ApPmV2Ap8:smDmDm7mDmDmQ
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
HEUR-Backdoor.Win32.Generic-90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c.exe
Resource
win7-20220812-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
HEUR-Backdoor.Win32.Generic-90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c.exe
Resource
win10v2004-20220812-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target HEUR-Backdoor.Win32.Generic-90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c.exe
- Size 2.1MB
- SHA256 90a23ff30cf40dbf180e2ca98360bbcecaf1a736f7bb118efe7fbff2db7dc82c
- MD5 e4311ab08f705b3b150e1be181c9e260
- SHA1 3c8cdf195e5d2ff97524c60edbcf7c1f4c58a87f
- SHA512 26ba5e2d8cf92aa5f4cf80021fe5d798ef92b529d4139d9b85de2d0cecdf3966257d9832466e7d08cb5f5d6494b465ef3988b4b444df4377f0723975cc62cb52
- SSDEEP 49152:smV2ApPmV2ApPmV2Ap/mV2ApPmV2ApPmV2Ap8:smDmDm7mDmDmQ
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies WinLogon