Overview

overview

10

Static

static

e827db8926...37.exe

windows7-x64

10

e827db8926...37.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e827db8926d09b4d046258a6e74a83bcc268db0a1c3e546cc6d4259388d81837

  • Size

    166KB

  • Sample

    221204-hfbdjaed37

  • MD5

    0ec5bb7ee52277b898e10a0888506157

  • SHA1

    45d5fb27e9ccc52beede3564167c8fe155d1fd5f

  • SHA256

    e827db8926d09b4d046258a6e74a83bcc268db0a1c3e546cc6d4259388d81837

  • SHA512

    f7ad9c818a62e41749d901830b43cac678f30be64e88a30526fb7161afcfbe03bc454d7ff8fae4f36bb4d407c6d485259ca12d486fde70fb38c5a70a3fb5348b

  • SSDEEP

    3072:jRpYH3CBXgIVHWHEFrmqlixlrZ+Oni3TPmOurlEcMjZGg:jYA3mbLkmOUlEcoZb

Score
10/10
persistence

Malware Config

Targets

    • Target

      e827db8926d09b4d046258a6e74a83bcc268db0a1c3e546cc6d4259388d81837

    • Size

      166KB

    • MD5

      0ec5bb7ee52277b898e10a0888506157

    • SHA1

      45d5fb27e9ccc52beede3564167c8fe155d1fd5f

    • SHA256

      e827db8926d09b4d046258a6e74a83bcc268db0a1c3e546cc6d4259388d81837

    • SHA512

      f7ad9c818a62e41749d901830b43cac678f30be64e88a30526fb7161afcfbe03bc454d7ff8fae4f36bb4d407c6d485259ca12d486fde70fb38c5a70a3fb5348b

    • SSDEEP

      3072:jRpYH3CBXgIVHWHEFrmqlixlrZ+Oni3TPmOurlEcMjZGg:jYA3mbLkmOUlEcoZb

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in Drivers directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks