Overview

overview

10

Static

static

75e1f3bf83...dd.exe

windows7-x64

10

75e1f3bf83...dd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    75e1f3bf838b2242ad7d4d737bddd05f80a30ad2a03b338fcc014f6f152597dd

  • Size

    250KB

  • Sample

    221121-lft3esgf7v

  • MD5

    3b38fefbdfa81612f82c2e8d29b81da1

  • SHA1

    ca28e9e130df61c986a5bf44baa1e49b6d563d61

  • SHA256

    75e1f3bf838b2242ad7d4d737bddd05f80a30ad2a03b338fcc014f6f152597dd

  • SHA512

    1f16d63710511d008265dad34716da4a72ceea06e8146a2024a39b3b9521f23ec50d79cd37e4aed20da13bcfb7407b7abc4c2549c9f4f6c13eb20baf3502d59a

  • SSDEEP

    6144:pUAifuWI91r96cryESCSCSCSpSKS0StS1SeSlS4SESsSISCSx:C9uWIt6ZESCSCSCSpSKS0StS1SeSlS4I

Score
10/10
persistence

Malware Config

Targets

    • Target

      75e1f3bf838b2242ad7d4d737bddd05f80a30ad2a03b338fcc014f6f152597dd

    • Size

      250KB

    • MD5

      3b38fefbdfa81612f82c2e8d29b81da1

    • SHA1

      ca28e9e130df61c986a5bf44baa1e49b6d563d61

    • SHA256

      75e1f3bf838b2242ad7d4d737bddd05f80a30ad2a03b338fcc014f6f152597dd

    • SHA512

      1f16d63710511d008265dad34716da4a72ceea06e8146a2024a39b3b9521f23ec50d79cd37e4aed20da13bcfb7407b7abc4c2549c9f4f6c13eb20baf3502d59a

    • SSDEEP

      6144:pUAifuWI91r96cryESCSCSCSpSKS0StS1SeSlS4SESsSISCSx:C9uWIt6ZESCSCSCSpSKS0StS1SeSlS4I

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks