Overview

overview

10

Static

static

1

spug64.exe

windows7-x64

10

spug64.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    spug64.exe

  • Size

    201KB

  • Sample

    231224-zfawfabefm

  • MD5

    af29a38b6f5daf91fc870a963df19326

  • SHA1

    ec97bde09deca0e88679cf356b6fcd5d8dd7f8a6

  • SHA256

    e1376b3c7237ef685ffe4185857ca13dd03f579fb009740b1d70225a04900734

  • SHA512

    bf7d9fbb84dc81080fc09397a0d42807931da8d050534a8d758286f38d6909c91f60ee298b183d7b3dc0657a64f848ff84b923e8c8e1439191b62f0725c7a51d

  • SSDEEP

    6144:Xt++Jbojf5Vq5OC4qZhZcKYhc/ZfUozY:c+cff22qZhZcKYhc/

Score
10/10
persistence

Malware Config

Targets

    • Target

      spug64.exe

    • Size

      201KB

    • MD5

      af29a38b6f5daf91fc870a963df19326

    • SHA1

      ec97bde09deca0e88679cf356b6fcd5d8dd7f8a6

    • SHA256

      e1376b3c7237ef685ffe4185857ca13dd03f579fb009740b1d70225a04900734

    • SHA512

      bf7d9fbb84dc81080fc09397a0d42807931da8d050534a8d758286f38d6909c91f60ee298b183d7b3dc0657a64f848ff84b923e8c8e1439191b62f0725c7a51d

    • SSDEEP

      6144:Xt++Jbojf5Vq5OC4qZhZcKYhc/ZfUozY:c+cff22qZhZcKYhc/

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks