General
- Target 51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd
- Size 104KB
- Sample221201-e58tjshf4t
- SHA256 51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd
- MD5 9b39c62a3880483c6b6c3a43c9ce79ce
- SHA1 9e6e344f9390022e9cac676fb61aeec20f7fc0ea
- SHA512 07dd26509102b07c3ab40270dc72b56ee9c2f1ea4db105059b633feb1187aaca3e9246b086f76edad48d6d8d5827b7162cb1f924685d7846b93154dd7451c6de
- SSDEEP 1536:8jz9uWp5TyYTxdNTuSgxmVoFwLSoAi1lwteyHKCqHfdDKRHTHRHTYRHT:8jz9lHNXgxmVoFJ0lwKflmdTdEd
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd.exe
Resource
win7-20221111-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd.exe
Resource
win10v2004-20221111-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd
- Size 104KB
- SHA256 51e923d1f56a34c668e2f1d5e6e6d2751a3fa9b6f772dfa44f71c9a4f4ad47bd
- MD5 9b39c62a3880483c6b6c3a43c9ce79ce
- SHA1 9e6e344f9390022e9cac676fb61aeec20f7fc0ea
- SHA512 07dd26509102b07c3ab40270dc72b56ee9c2f1ea4db105059b633feb1187aaca3e9246b086f76edad48d6d8d5827b7162cb1f924685d7846b93154dd7451c6de
- SSDEEP 1536:8jz9uWp5TyYTxdNTuSgxmVoFwLSoAi1lwteyHKCqHfdDKRHTHRHTYRHT:8jz9lHNXgxmVoFJ0lwKflmdTdEd
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Suspicious use of NtSetInformationThreadHideFromDebugger