Overview

overview

10

Static

static

a2be692070...72.exe

windows7-x64

10

a2be692070...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a2be6920703854f4dbfdaeaf0b950e985be1b98e51670d7968834581e9dcc572

  • Size

    193KB

  • Sample

    221204-agpzbade7v

  • MD5

    c2ca631a8942285b54928a516e416f4b

  • SHA1

    dc221ce92c8e7b6460d6fa75ba04e4085827640f

  • SHA256

    a2be6920703854f4dbfdaeaf0b950e985be1b98e51670d7968834581e9dcc572

  • SHA512

    2305d40e1d71d425cb7d8cb799aaa878aeaf0e23b84c4c2c7b766c676f8cf29deb363cfd879dedd905decaf43a1a163a6fb9a39a4d39e07c5b8ea7214762b9b5

  • SSDEEP

    3072:Dd9VhgzwTkzfX0cEiwjArqhd+ZUWptkn9COslBZ/KL2S+MHgY+biWQoTnRTl40xm:hhezfL2hkiWgCOiZyLOD3TFl4N/ha2

Score
10/10
persistence

Malware Config

Targets

    • Target

      a2be6920703854f4dbfdaeaf0b950e985be1b98e51670d7968834581e9dcc572

    • Size

      193KB

    • MD5

      c2ca631a8942285b54928a516e416f4b

    • SHA1

      dc221ce92c8e7b6460d6fa75ba04e4085827640f

    • SHA256

      a2be6920703854f4dbfdaeaf0b950e985be1b98e51670d7968834581e9dcc572

    • SHA512

      2305d40e1d71d425cb7d8cb799aaa878aeaf0e23b84c4c2c7b766c676f8cf29deb363cfd879dedd905decaf43a1a163a6fb9a39a4d39e07c5b8ea7214762b9b5

    • SSDEEP

      3072:Dd9VhgzwTkzfX0cEiwjArqhd+ZUWptkn9COslBZ/KL2S+MHgY+biWQoTnRTl40xm:hhezfL2hkiWgCOiZyLOD3TFl4N/ha2

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Modifies Installed Components in the registry

      persistence

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks