Overview

overview

10

Static

static

b48d6274a0...21.exe

windows7-x64

10

b48d6274a0...21.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b48d6274a0c7234863b5431ff666e40b745104b5632923dc17944b4b56c79621

  • Size

    238KB

  • Sample

    221126-cs3qnaee29

  • MD5

    55f78be6532e48442f4f6f288ba66c30

  • SHA1

    1abbaf45bf5c21ff39dff07808cae1161af8c34f

  • SHA256

    b48d6274a0c7234863b5431ff666e40b745104b5632923dc17944b4b56c79621

  • SHA512

    d8dd5e372de0aecc9ea093e95a293de275868fdc0562c3c5b8dc31d961410e91568eb94d24b19ced1027a1b58187e7d128f703e3a868166ab04dba62089a2c0e

  • SSDEEP

    1536:BIfiwdCuQAOlIh3MEgcI+uMf1zwQVgvqd1mhauRPW:B6inZlIRMsB1zwLvqdcHP

Score
10/10
persistence

Malware Config

Targets

    • Target

      b48d6274a0c7234863b5431ff666e40b745104b5632923dc17944b4b56c79621

    • Size

      238KB

    • MD5

      55f78be6532e48442f4f6f288ba66c30

    • SHA1

      1abbaf45bf5c21ff39dff07808cae1161af8c34f

    • SHA256

      b48d6274a0c7234863b5431ff666e40b745104b5632923dc17944b4b56c79621

    • SHA512

      d8dd5e372de0aecc9ea093e95a293de275868fdc0562c3c5b8dc31d961410e91568eb94d24b19ced1027a1b58187e7d128f703e3a868166ab04dba62089a2c0e

    • SSDEEP

      1536:BIfiwdCuQAOlIh3MEgcI+uMf1zwQVgvqd1mhauRPW:B6inZlIRMsB1zwLvqdcHP

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks