Overview

overview

10

Static

static

7abffb22a8...2d.exe

windows7-x64

10

7abffb22a8...2d.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d

  • Size

    58KB

  • Sample

    221129-h5bqlagd79

  • MD5

    052b8bd1e6f6220b6c9689dcb6311630

  • SHA1

    36542cbf913333c393808be1a6552da42d04371e

  • SHA256

    7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d

  • SHA512

    c97b1dadc1cfae9c5f2fb03c666cee50ba5ae25af3fd1f5dfabd134b4960fab4bf0cd3f9448756b4e2fb386a539870053527577eab67c29a7e23493c8d2000e9

  • SSDEEP

    1536:zd35348OJzHt7AZY5XEhdUpoFlYUkdr4EdW6H0w2:zdN48OFBHOAoTYlr0i0w

Score
10/10
persistence

Malware Config

Targets

    • Target

      7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d

    • Size

      58KB

    • MD5

      052b8bd1e6f6220b6c9689dcb6311630

    • SHA1

      36542cbf913333c393808be1a6552da42d04371e

    • SHA256

      7abffb22a85ce4197a896afc1fd033d18b6278bb4b053d241e1616bb3f69062d

    • SHA512

      c97b1dadc1cfae9c5f2fb03c666cee50ba5ae25af3fd1f5dfabd134b4960fab4bf0cd3f9448756b4e2fb386a539870053527577eab67c29a7e23493c8d2000e9

    • SSDEEP

      1536:zd35348OJzHt7AZY5XEhdUpoFlYUkdr4EdW6H0w2:zdN48OFBHOAoTYlr0i0w

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks