Overview

overview

10

Static

static

8b218eabf5...cb.exe

windows7-x64

5

8b218eabf5...cb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b218eabf5a71af489bde2b63a90459580a2f215bfe5c5e3f536cdf16aec95cb

  • Size

    1.2MB

  • Sample

    221123-w3r7fsgf5z

  • MD5

    3cb6c82637c34036f154664c66680165

  • SHA1

    681bd8a88866f1d700b70fabf1a6bd372c06f779

  • SHA256

    8b218eabf5a71af489bde2b63a90459580a2f215bfe5c5e3f536cdf16aec95cb

  • SHA512

    38796eb5e945c19b4165169ac5eb3648a451d4323452c5fb9ca263d42dee87b0384e85e029663f812f1f57fd91df4b3eeb1f31a88b423cf84c29e88b23b12b99

  • SSDEEP

    24576:VkEBSta9vNB1MTN2kmRCCTBMR6FrLoGOxTFYOx6NmiQdzmy+/E8:DBStSvJUzmECTBiqwxio6NZKW/n

Score
10/10
persistence

Malware Config

Targets

    • Target

      8b218eabf5a71af489bde2b63a90459580a2f215bfe5c5e3f536cdf16aec95cb

    • Size

      1.2MB

    • MD5

      3cb6c82637c34036f154664c66680165

    • SHA1

      681bd8a88866f1d700b70fabf1a6bd372c06f779

    • SHA256

      8b218eabf5a71af489bde2b63a90459580a2f215bfe5c5e3f536cdf16aec95cb

    • SHA512

      38796eb5e945c19b4165169ac5eb3648a451d4323452c5fb9ca263d42dee87b0384e85e029663f812f1f57fd91df4b3eeb1f31a88b423cf84c29e88b23b12b99

    • SSDEEP

      24576:VkEBSta9vNB1MTN2kmRCCTBMR6FrLoGOxTFYOx6NmiQdzmy+/E8:DBStSvJUzmECTBiqwxio6NZKW/n

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks