Overview

overview

10

Static

static

8acde30e72...75.exe

windows7-x64

5

8acde30e72...75.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8acde30e72ef27759d47d206b6d2b98eaee6488cd482f381edc2da57d9e08c75

  • Size

    473KB

  • Sample

    221128-dxklbabc93

  • MD5

    e5d7e2b521e68e174d8db3b926673df2

  • SHA1

    ff1f65c62062256e171d32de43b7e9619bed52d2

  • SHA256

    8acde30e72ef27759d47d206b6d2b98eaee6488cd482f381edc2da57d9e08c75

  • SHA512

    504889e6773f25233ec9a9a3a065e82f2e88a2d2c86c3039e606eb44a58e0c9afe1e11fa29afd50284751fa1ccdc24613a7ccc44f9fa62a7719d4487363cfaf4

  • SSDEEP

    12288:uEce43Tdi4ZRJUKBGsaLYjstN0WXs8z8g:uEceQTXZVU/Y+XtJ

Score
10/10
persistence

Malware Config

Targets

    • Target

      8acde30e72ef27759d47d206b6d2b98eaee6488cd482f381edc2da57d9e08c75

    • Size

      473KB

    • MD5

      e5d7e2b521e68e174d8db3b926673df2

    • SHA1

      ff1f65c62062256e171d32de43b7e9619bed52d2

    • SHA256

      8acde30e72ef27759d47d206b6d2b98eaee6488cd482f381edc2da57d9e08c75

    • SHA512

      504889e6773f25233ec9a9a3a065e82f2e88a2d2c86c3039e606eb44a58e0c9afe1e11fa29afd50284751fa1ccdc24613a7ccc44f9fa62a7719d4487363cfaf4

    • SSDEEP

      12288:uEce43Tdi4ZRJUKBGsaLYjstN0WXs8z8g:uEceQTXZVU/Y+XtJ

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks