General

  • Target

    easy_Malicious_25ca91e0d2c46fcc70c70e2469afca66ccfb73b7ce36b2e0dddd0fe547d504d8.exe

  • Size

    288KB

  • Sample

    230704-sqlblaee99

  • MD5

    22deae01b01d6758f25c9049a8cd07e2

  • SHA1

    0cb647a8c70f873d2af3a8aa36f51e4c47f3b598

  • SHA256

    ce5d1ecd227bb320a00ac897a0ec79fdf61a706119031dbd51cb224891c68a15

  • SHA512

    c33a6acc4b33de7a3857b613b3cd23a7d911e12485cf95d7d337b7dcf5a582b95651101d4743f0c846db6fbbe677d26e6e20a5431485c0cb10f35b2ffad2195a

  • SSDEEP

    6144:W731bdBaB0LALXMUJ+SYR7TK+8s+Xy/808G96KmCc+YsmrTOJNSchD:c1bpk7MUkSYENzyEFCc+RQTS5

Score
10/10

Malware Config

Targets

    • Target

      easy_Malicious_25ca91e0d2c46fcc70c70e2469afca66ccfb73b7ce36b2e0dddd0fe547d504d8.exe

    • Size

      288KB

    • MD5

      22deae01b01d6758f25c9049a8cd07e2

    • SHA1

      0cb647a8c70f873d2af3a8aa36f51e4c47f3b598

    • SHA256

      ce5d1ecd227bb320a00ac897a0ec79fdf61a706119031dbd51cb224891c68a15

    • SHA512

      c33a6acc4b33de7a3857b613b3cd23a7d911e12485cf95d7d337b7dcf5a582b95651101d4743f0c846db6fbbe677d26e6e20a5431485c0cb10f35b2ffad2195a

    • SSDEEP

      6144:W731bdBaB0LALXMUJ+SYR7TK+8s+Xy/808G96KmCc+YsmrTOJNSchD:c1bpk7MUkSYENzyEFCc+RQTS5

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v6

Tasks