General
-
Target
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1
-
Size
590KB
-
Sample
221125-x8mplaac52
-
MD5
88308074e4db96772825ed3e257c0adb
-
SHA1
a356c2e2ecfaade0c62b361d89eb058784f78c4d
-
SHA256
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1
-
SHA512
dfb45a5204250e0c35ff3775db6f2610d6b182d97258b6253fabe6c614141f2ed75168e61cbd8250f60398e9f894c8d3e713e14f1e2b529bc9d1a87ce8f63717
-
SSDEEP
12288:J6Wq4aaE6KwyF5L0Y2D1PqLc0WLakcXhjtI2RTDXoLsa0P6p:fthEVaPqLCLvcXh5I2RTMCQ
Behavioral task
behavioral1
Sample
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1.exe
Resource
win10v2004-20220812-en
Malware Config
Targets
-
-
Target
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1
-
Size
590KB
-
MD5
88308074e4db96772825ed3e257c0adb
-
SHA1
a356c2e2ecfaade0c62b361d89eb058784f78c4d
-
SHA256
ef745b3e0b695e3f29eb20e3d1a8524afabdd8eb59457239af76021556c39ca1
-
SHA512
dfb45a5204250e0c35ff3775db6f2610d6b182d97258b6253fabe6c614141f2ed75168e61cbd8250f60398e9f894c8d3e713e14f1e2b529bc9d1a87ce8f63717
-
SSDEEP
12288:J6Wq4aaE6KwyF5L0Y2D1PqLc0WLakcXhjtI2RTDXoLsa0P6p:fthEVaPqLCLvcXh5I2RTMCQ
Score10/10-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Drops startup file
-
AutoIT Executable
AutoIT scripts compiled to PE executables.
-