Overview

overview

10

Static

static

191e674e7e...d7.exe

windows7-x64

10

191e674e7e...d7.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    191e674e7e75793a768ea2db377adbd17b9457a10cc8d6662867d9aa09df2fd7

  • Size

    310KB

  • Sample

    221123-r81nkadf8t

  • MD5

    bd566d54e7d335bf77f7664fede774c0

  • SHA1

    97b56ddc27a0d0dff8d8229174127ac40bf5a928

  • SHA256

    191e674e7e75793a768ea2db377adbd17b9457a10cc8d6662867d9aa09df2fd7

  • SHA512

    08e1dfb0292ef85db691aadf2078587faeae96afb631c2320d4f6cf72c4bbf6fc49a04afa5df491a5fda8a4910e903309dc32f10e0683d6bceb52df2c2322641

  • SSDEEP

    3072:dnjFDLEL/dNrEo/VRz23eVqywHqDMsYa+TEh:dnj1LELzAO41sYa+Ty

Score
10/10
persistence

Malware Config

Targets

    • Target

      191e674e7e75793a768ea2db377adbd17b9457a10cc8d6662867d9aa09df2fd7

    • Size

      310KB

    • MD5

      bd566d54e7d335bf77f7664fede774c0

    • SHA1

      97b56ddc27a0d0dff8d8229174127ac40bf5a928

    • SHA256

      191e674e7e75793a768ea2db377adbd17b9457a10cc8d6662867d9aa09df2fd7

    • SHA512

      08e1dfb0292ef85db691aadf2078587faeae96afb631c2320d4f6cf72c4bbf6fc49a04afa5df491a5fda8a4910e903309dc32f10e0683d6bceb52df2c2322641

    • SSDEEP

      3072:dnjFDLEL/dNrEo/VRz23eVqywHqDMsYa+TEh:dnj1LELzAO41sYa+Ty

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks