Overview

overview

10

Static

static

162b6a6d9b...1b.exe

windows7-x64

10

162b6a6d9b...1b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    162b6a6d9b2e625594fa799ebefdd185ac0324780a48836fd5072b32cff11a1b

  • Size

    1.3MB

  • Sample

    221107-s18vmsgcfl

  • MD5

    0c91b547a4728d342a35c8c53e278709

  • SHA1

    6db8e81e04dc1b9bd3f48f95f51b924765e0c8dd

  • SHA256

    162b6a6d9b2e625594fa799ebefdd185ac0324780a48836fd5072b32cff11a1b

  • SHA512

    ab36e2cfdd99fb50648f32368696c4006a521d909311a4a4fa791805f9128d4eae6389cf1fd1221b4da42df90a2b58a5fe76c31399521af9e22d54de1dbf5af2

  • SSDEEP

    24576:51bdFto42fFHBarkbcNm5CAS7LccD7hBJefDToLzlDsrDVuzF8B:5tmHYkQNmUAETBJefDMLCrDVuyB

Score
10/10
persistence

Malware Config

Targets

    • Target

      162b6a6d9b2e625594fa799ebefdd185ac0324780a48836fd5072b32cff11a1b

    • Size

      1.3MB

    • MD5

      0c91b547a4728d342a35c8c53e278709

    • SHA1

      6db8e81e04dc1b9bd3f48f95f51b924765e0c8dd

    • SHA256

      162b6a6d9b2e625594fa799ebefdd185ac0324780a48836fd5072b32cff11a1b

    • SHA512

      ab36e2cfdd99fb50648f32368696c4006a521d909311a4a4fa791805f9128d4eae6389cf1fd1221b4da42df90a2b58a5fe76c31399521af9e22d54de1dbf5af2

    • SSDEEP

      24576:51bdFto42fFHBarkbcNm5CAS7LccD7hBJefDToLzlDsrDVuzF8B:5tmHYkQNmUAETBJefDMLCrDVuyB

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks