General

  • Target

    c4ae1190205b1384155e2e6eb0206157be993ff48dd5c729ceea8e6128721a53

  • Size

    67KB

  • Sample

    221203-f79djacf4y

  • MD5

    432939c686103e0e4f3b6942219d63a0

  • SHA1

    f69a6b4bdb0b55ec226668b0d5e0ba6788962e90

  • SHA256

    c4ae1190205b1384155e2e6eb0206157be993ff48dd5c729ceea8e6128721a53

  • SHA512

    2dcae6dee247f402543dff94b5288f18607ba4a10280f29f2297a5f532a3ee98a39b866bc56d3876676e012c6b3e5f8684f2f9dbd0ecc517fee7b818e61fdab3

  • SSDEEP

    1536:JqOM6fCX4FgATNmQ4U5pjVqtS2fmp6NDGCLjk0tJqxRNCa2ma:JqsCoF5NmsVyfY6brtoQG

Score
10/10

Malware Config

Targets

    • Target

      c4ae1190205b1384155e2e6eb0206157be993ff48dd5c729ceea8e6128721a53

    • Size

      67KB

    • MD5

      432939c686103e0e4f3b6942219d63a0

    • SHA1

      f69a6b4bdb0b55ec226668b0d5e0ba6788962e90

    • SHA256

      c4ae1190205b1384155e2e6eb0206157be993ff48dd5c729ceea8e6128721a53

    • SHA512

      2dcae6dee247f402543dff94b5288f18607ba4a10280f29f2297a5f532a3ee98a39b866bc56d3876676e012c6b3e5f8684f2f9dbd0ecc517fee7b818e61fdab3

    • SSDEEP

      1536:JqOM6fCX4FgATNmQ4U5pjVqtS2fmp6NDGCLjk0tJqxRNCa2ma:JqsCoF5NmsVyfY6brtoQG

    Score
    10/10
    • Modifies WinLogon for persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v6

Tasks