Overview

overview

10

Static

static

c44cab6773...8d.exe

windows7-x64

10

c44cab6773...8d.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c44cab677372525ad23d447b5511976f98c0859531a5b75b3555c0665ffef38d

  • Size

    2.2MB

  • Sample

    221206-jfdz4aaf6w

  • MD5

    885090d2bc9024a7b4b43adb3e988e61

  • SHA1

    4cbcf18a343a60f53bd59e081a6cd0fbf809b1e0

  • SHA256

    c44cab677372525ad23d447b5511976f98c0859531a5b75b3555c0665ffef38d

  • SHA512

    a89990c7f35221e3a749c70521e2abd03dcfb9238c65f83f96774026c3aef5eb0342e1cc8f7aaa078112fdb139cd858a0a372342a414ccd11e8a43fe92defe8a

  • SSDEEP

    49152:21dHhwSGDIaP7oP4GcakEPoSFZymFHgD0OhRo5jT:6HhPEIapmxPoSFZle0BT

Score
10/10
persistence

Malware Config

Targets

    • Target

      c44cab677372525ad23d447b5511976f98c0859531a5b75b3555c0665ffef38d

    • Size

      2.2MB

    • MD5

      885090d2bc9024a7b4b43adb3e988e61

    • SHA1

      4cbcf18a343a60f53bd59e081a6cd0fbf809b1e0

    • SHA256

      c44cab677372525ad23d447b5511976f98c0859531a5b75b3555c0665ffef38d

    • SHA512

      a89990c7f35221e3a749c70521e2abd03dcfb9238c65f83f96774026c3aef5eb0342e1cc8f7aaa078112fdb139cd858a0a372342a414ccd11e8a43fe92defe8a

    • SSDEEP

      49152:21dHhwSGDIaP7oP4GcakEPoSFZymFHgD0OhRo5jT:6HhPEIapmxPoSFZle0BT

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks