General
-
Target
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0
-
Size
153KB
-
Sample
221125-hmcj6scf6v
-
MD5
18438522a7d9dcba961e6137345ab028
-
SHA1
7dfd34841ca7e87debcb8b8825e3dbda34fc666c
-
SHA256
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0
-
SHA512
b3352f0f4f2f7f71bc6f37d97fb199bcc2364fe12103305acf914357d56cb079148728197dee24b4149253cc73ec1cea80fbe8d0fdb9acebf353579167ce1f5b
-
SSDEEP
1536:MRV6r3J5iQ271nb3jSek/f3kjW45A6K8wbkxscyKu/z5oDqxR3rxAEmDdoYD:Mqr3JiN38F9bkxHyKuPxRGEm2YD
Static task
static1
Behavioral task
behavioral1
Sample
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0
-
Size
153KB
-
MD5
18438522a7d9dcba961e6137345ab028
-
SHA1
7dfd34841ca7e87debcb8b8825e3dbda34fc666c
-
SHA256
ec421843b3b508a41a0f19a6d34e8a0cd2e5ac9714744363987369d08c4103d0
-
SHA512
b3352f0f4f2f7f71bc6f37d97fb199bcc2364fe12103305acf914357d56cb079148728197dee24b4149253cc73ec1cea80fbe8d0fdb9acebf353579167ce1f5b
-
SSDEEP
1536:MRV6r3J5iQ271nb3jSek/f3kjW45A6K8wbkxscyKu/z5oDqxR3rxAEmDdoYD:Mqr3JiN38F9bkxHyKuPxRGEm2YD
Score10/10-
Modifies WinLogon for persistence
-
Adds Run key to start application
-
Drops desktop.ini file(s)
-
Modifies WinLogon
-
Suspicious use of SetThreadContext
-