General
-
Target
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e
-
Size
351KB
-
Sample
221123-p2l6gsfg9v
-
MD5
8bca8f663a45793182e301e5eb00510a
-
SHA1
6326136b3d32a736756147df147badcc4a98fcb4
-
SHA256
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e
-
SHA512
a5b9e41ca49fbbf736f070c9f65947ff042f61be48d95856dcaab13cb1d2347daec42231a1c71f8b7221c371bce63c0111cb8b04ab5aacd6cc2c4df3d7126d32
-
SSDEEP
6144:hq+PZTDlGsitFRWmEd5B5W4Wz2usuQxaVzJD8qzCD7O6J6dI1M+wxE6e0yC:hq+BK8j/W4+6uQc9JBM756dI1ITefC
Static task
static1
Behavioral task
behavioral1
Sample
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e
-
Size
351KB
-
MD5
8bca8f663a45793182e301e5eb00510a
-
SHA1
6326136b3d32a736756147df147badcc4a98fcb4
-
SHA256
e79317f601acb972f099d1e1188d20720413cc153bdeda2ca17d55193dd10d2e
-
SHA512
a5b9e41ca49fbbf736f070c9f65947ff042f61be48d95856dcaab13cb1d2347daec42231a1c71f8b7221c371bce63c0111cb8b04ab5aacd6cc2c4df3d7126d32
-
SSDEEP
6144:hq+PZTDlGsitFRWmEd5B5W4Wz2usuQxaVzJD8qzCD7O6J6dI1M+wxE6e0yC:hq+BK8j/W4+6uQc9JBM756dI1ITefC
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Deletes itself
-
Loads dropped DLL
-
Suspicious use of SetThreadContext
-