General

  • Target

    NEAS.0218556280a53d710e883b8de6071d50_JC.exe

  • Size

    1.1MB

  • Sample

    231014-llyb2adg83

  • MD5

    0218556280a53d710e883b8de6071d50

  • SHA1

    235271004614a1134864f0bddcaa2d078b5780ab

  • SHA256

    79367354779cad607d7b165c942716cf8ceea00ab1e94e23b193b33f064e852a

  • SHA512

    ab20b3d1a2dc9cb4715e936324c92b4928a8ab3339126b65537dc3f830c2bbb8f152102f1b5040def934593b3ec8fb47105a472f1584997d42326f66ec7dde65

  • SSDEEP

    24576:51brASatsVPh/7v5M9mlcFVI0kHJkP+Yt9x2DRS6OzAUIk+2:5pARts5hzKglcFBkNYbKSHAPkX

Score
10/10

Malware Config

Targets

    • Target

      NEAS.0218556280a53d710e883b8de6071d50_JC.exe

    • Size

      1.1MB

    • MD5

      0218556280a53d710e883b8de6071d50

    • SHA1

      235271004614a1134864f0bddcaa2d078b5780ab

    • SHA256

      79367354779cad607d7b165c942716cf8ceea00ab1e94e23b193b33f064e852a

    • SHA512

      ab20b3d1a2dc9cb4715e936324c92b4928a8ab3339126b65537dc3f830c2bbb8f152102f1b5040def934593b3ec8fb47105a472f1584997d42326f66ec7dde65

    • SSDEEP

      24576:51brASatsVPh/7v5M9mlcFVI0kHJkP+Yt9x2DRS6OzAUIk+2:5pARts5hzKglcFBkNYbKSHAPkX

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks