Overview

overview

10

Static

static

bbabadf67e...89.exe

windows7-x64

10

bbabadf67e...89.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    bbabadf67e19778ef6f654462ba2a723fe280f61e30385a9af32c10199662389

  • Size

    59KB

  • Sample

    221203-3bdcjsac5t

  • MD5

    16147ba8327814e00444c5a1500e389a

  • SHA1

    2091e00932075e09cf472762fed0a3f2ac5e7cb8

  • SHA256

    bbabadf67e19778ef6f654462ba2a723fe280f61e30385a9af32c10199662389

  • SHA512

    d32001738268d08db84d02ad3dfbd8eaa21e7121ede695159f51696f93199966b632dc2f0982e0ac01be6b31e3348d0530cfe2bacfebe05c7cf7d4fa3c29824a

  • SSDEEP

    768:j+DETSkJgnaRYsoTvNy/dXsg3LN97p2c9MSbaFksWiv1ckYe7cFe+Fh6:j+DZkOnagNch5tkc90WiZhc

Score
10/10
persistence

Malware Config

Targets

    • Target

      bbabadf67e19778ef6f654462ba2a723fe280f61e30385a9af32c10199662389

    • Size

      59KB

    • MD5

      16147ba8327814e00444c5a1500e389a

    • SHA1

      2091e00932075e09cf472762fed0a3f2ac5e7cb8

    • SHA256

      bbabadf67e19778ef6f654462ba2a723fe280f61e30385a9af32c10199662389

    • SHA512

      d32001738268d08db84d02ad3dfbd8eaa21e7121ede695159f51696f93199966b632dc2f0982e0ac01be6b31e3348d0530cfe2bacfebe05c7cf7d4fa3c29824a

    • SSDEEP

      768:j+DETSkJgnaRYsoTvNy/dXsg3LN97p2c9MSbaFksWiv1ckYe7cFe+Fh6:j+DZkOnagNch5tkc90WiZhc

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks