General
-
Target
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73
-
Size
69KB
-
Sample
221126-23lmkafc51
-
MD5
5f556f54af2201a1bc8bafe4191d97d4
-
SHA1
5a786da46ba3450cb3b80c1e7c017df1e97d59e6
-
SHA256
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73
-
SHA512
58fcaebc9f49569f6f7abb23ccd582c8523ff7f8d89752830349ec6d74a4e0f2f7af89bae3d441ca383b5f1ea3521c64b9faae4e7c3269d1a696938eb0b10756
-
SSDEEP
1536:4YEiFJLaE0et29OXBiJL9RLG4eIuVKS4Sy:hEiFYE0Y2QXEZ9RFeVVU1
Static task
static1
Behavioral task
behavioral1
Sample
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73.exe
Resource
win10v2004-20221111-en
Malware Config
Targets
-
-
Target
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73
-
Size
69KB
-
MD5
5f556f54af2201a1bc8bafe4191d97d4
-
SHA1
5a786da46ba3450cb3b80c1e7c017df1e97d59e6
-
SHA256
0ccf623cfcaa3dc374668b613ff6fa7240843a50866613da9db93b3a7f77eb73
-
SHA512
58fcaebc9f49569f6f7abb23ccd582c8523ff7f8d89752830349ec6d74a4e0f2f7af89bae3d441ca383b5f1ea3521c64b9faae4e7c3269d1a696938eb0b10756
-
SSDEEP
1536:4YEiFJLaE0et29OXBiJL9RLG4eIuVKS4Sy:hEiFYE0Y2QXEZ9RFeVVU1
Score10/10-
Modifies WinLogon for persistence
-
Suspicious use of NtSetInformationThreadHideFromDebugger
-
Suspicious use of SetThreadContext
-