Overview

overview

10

Static

static

46eb02a8c2...59.exe

windows7-x64

10

46eb02a8c2...59.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    46eb02a8c2dacfcf876ff222d7f48806867eefcecc77c39bf86551ed94a9b359

  • Size

    96KB

  • Sample

    221002-qxre3safaq

  • MD5

    63977ac7983f0939185614a948cab480

  • SHA1

    7a1efb8bb8bbd0b8e77b607e2f1285bc787f008a

  • SHA256

    46eb02a8c2dacfcf876ff222d7f48806867eefcecc77c39bf86551ed94a9b359

  • SHA512

    5f9c9e0e1ce1b7fb29208b202990eb6fa836f144a1055a06d20bf7f49708cdf4f078dd81c82ba996abf0b24f53c444bc76ea4c0c7751c11b22311866c31d2628

  • SSDEEP

    1536:RCSr0dTdzj8+caPF+j0Cwzo4VauIGuh/RrPF+L6r:driPcaP8jPco4Va/ZRjF+L6

Score
10/10
persistence

Malware Config

Targets

    • Target

      46eb02a8c2dacfcf876ff222d7f48806867eefcecc77c39bf86551ed94a9b359

    • Size

      96KB

    • MD5

      63977ac7983f0939185614a948cab480

    • SHA1

      7a1efb8bb8bbd0b8e77b607e2f1285bc787f008a

    • SHA256

      46eb02a8c2dacfcf876ff222d7f48806867eefcecc77c39bf86551ed94a9b359

    • SHA512

      5f9c9e0e1ce1b7fb29208b202990eb6fa836f144a1055a06d20bf7f49708cdf4f078dd81c82ba996abf0b24f53c444bc76ea4c0c7751c11b22311866c31d2628

    • SSDEEP

      1536:RCSr0dTdzj8+caPF+j0Cwzo4VauIGuh/RrPF+L6r:driPcaP8jPco4Va/ZRjF+L6

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks