Overview

overview

10

Static

static

4459c4b0a6...bb.exe

windows7-x64

10

4459c4b0a6...bb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4459c4b0a6c40f78e4fd2d51e6677fed19f43efabdcb4282047bc90caeddfbbb

  • Size

    136KB

  • Sample

    221123-rs73pshd87

  • MD5

    3a690b73d572227855e933a96f0bb73a

  • SHA1

    1993479eb954e4f0ef87903642f597c79d752f4b

  • SHA256

    4459c4b0a6c40f78e4fd2d51e6677fed19f43efabdcb4282047bc90caeddfbbb

  • SHA512

    234c8fca2c357f0f623e8fcc19a58cce8aee4b4cc75c67c214253752835505ce4e7b353f8792d2cc4f626faa1b0e48d26e7986c99df76538502f3793aeeb684a

  • SSDEEP

    3072:eUrKEL85tEhRBr2HOaigW1957nFqihYqyZGVxTmh:eU+ELH6w57nls6VM

Score
10/10
persistence

Malware Config

Targets

    • Target

      4459c4b0a6c40f78e4fd2d51e6677fed19f43efabdcb4282047bc90caeddfbbb

    • Size

      136KB

    • MD5

      3a690b73d572227855e933a96f0bb73a

    • SHA1

      1993479eb954e4f0ef87903642f597c79d752f4b

    • SHA256

      4459c4b0a6c40f78e4fd2d51e6677fed19f43efabdcb4282047bc90caeddfbbb

    • SHA512

      234c8fca2c357f0f623e8fcc19a58cce8aee4b4cc75c67c214253752835505ce4e7b353f8792d2cc4f626faa1b0e48d26e7986c99df76538502f3793aeeb684a

    • SSDEEP

      3072:eUrKEL85tEhRBr2HOaigW1957nFqihYqyZGVxTmh:eU+ELH6w57nls6VM

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks