Overview

overview

10

Static

static

d3180ee4bf...00.exe

windows7-x64

10

d3180ee4bf...00.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    d3180ee4bf0909da1f94dce422931c204f6283afc2d82094be265532940efd00

  • Size

    92KB

  • Sample

    221002-pcn9jsfhbj

  • MD5

    6375d11b1006ce26fe6ce58a7a6ea840

  • SHA1

    419ccacba596f7cbc965c64cfa68e7c0806197c0

  • SHA256

    d3180ee4bf0909da1f94dce422931c204f6283afc2d82094be265532940efd00

  • SHA512

    885e4f81bc1a529ceeacf8fd94d6f5419fd124ac9e37cead4269242759c9d127587ee065324ba8223d14b41e08bcbf5aae62be800ecc3b298eae12a2d68b0eb2

  • SSDEEP

    1536:lWUtr0vM9fvU+cCPFtjyGIHKVyo4VauIGuh/RrPW+L6r:IirnvcCPbjfOKwo4Va/ZRjW+L6

Score
10/10
persistence

Malware Config

Targets

    • Target

      d3180ee4bf0909da1f94dce422931c204f6283afc2d82094be265532940efd00

    • Size

      92KB

    • MD5

      6375d11b1006ce26fe6ce58a7a6ea840

    • SHA1

      419ccacba596f7cbc965c64cfa68e7c0806197c0

    • SHA256

      d3180ee4bf0909da1f94dce422931c204f6283afc2d82094be265532940efd00

    • SHA512

      885e4f81bc1a529ceeacf8fd94d6f5419fd124ac9e37cead4269242759c9d127587ee065324ba8223d14b41e08bcbf5aae62be800ecc3b298eae12a2d68b0eb2

    • SSDEEP

      1536:lWUtr0vM9fvU+cCPFtjyGIHKVyo4VauIGuh/RrPW+L6r:IirnvcCPbjfOKwo4Va/ZRjW+L6

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks