Overview

overview

10

Static

static

ca3be36fe0...a2.exe

windows7-x64

10

ca3be36fe0...a2.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ca3be36fe090995e3b0ab6e5bb7f0b873465843107f85f283f55d2b819cfcca2

  • Size

    117KB

  • Sample

    221123-tc6k2sgg51

  • MD5

    5f1205d6e07f9c20037537d1ea6018e4

  • SHA1

    661734b20c2330e9edcc536362a669c4789a5215

  • SHA256

    ca3be36fe090995e3b0ab6e5bb7f0b873465843107f85f283f55d2b819cfcca2

  • SHA512

    044ff5ddca603961a49bd8d58e11ed37d0720b6d2a3f4987cde12edeb8448c22e5c5365ab212499f7e6d60a4438d059aa134ca5a3d61792446bc34a1e45e6069

  • SSDEEP

    1536:Mpq5w6ZPfg2H46pojyF8YQlFtdSvAybQvvGmvn9aQGamYumznIy5gQ1VhpHvqCRn:MAlRgL6ujAJYOoiatuUnIyB1VjoAWc

Score
10/10
persistence

Malware Config

Targets

    • Target

      ca3be36fe090995e3b0ab6e5bb7f0b873465843107f85f283f55d2b819cfcca2

    • Size

      117KB

    • MD5

      5f1205d6e07f9c20037537d1ea6018e4

    • SHA1

      661734b20c2330e9edcc536362a669c4789a5215

    • SHA256

      ca3be36fe090995e3b0ab6e5bb7f0b873465843107f85f283f55d2b819cfcca2

    • SHA512

      044ff5ddca603961a49bd8d58e11ed37d0720b6d2a3f4987cde12edeb8448c22e5c5365ab212499f7e6d60a4438d059aa134ca5a3d61792446bc34a1e45e6069

    • SSDEEP

      1536:Mpq5w6ZPfg2H46pojyF8YQlFtdSvAybQvvGmvn9aQGamYumznIy5gQ1VhpHvqCRn:MAlRgL6ujAJYOoiatuUnIyB1VjoAWc

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds Run key to start application

      persistence

    • Drops desktop.ini file(s)

    • Modifies WinLogon

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks