Overview

overview

10

Static

static

3

411c9be1fd...15.exe

windows7-x64

10

411c9be1fd...15.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    411c9be1fd7c502768eaffed6df2a415

  • Size

    156KB

  • Sample

    231225-2p3c6adgd8

  • MD5

    411c9be1fd7c502768eaffed6df2a415

  • SHA1

    9f9f76dd49bc79b357280744b57f17a95d210a57

  • SHA256

    e47f2ef05bb54c3846381a68b649e4fbfddc88f28e5234561dd6db300ebc3cd9

  • SHA512

    fa6628cd39d0de58f0b1f370705a34e72ef252f46c471e601e8bf3b7c95aeda79b72e5551f370c31d3e9d9ff64070ecd7e1d63ca2140269289619236434502e1

  • SSDEEP

    192:ENrN1miRx8TeAOU190BBkxCQOXW8Vn3NLg5qPCVu1miRx:8UTRyBbQiVnShVW

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      411c9be1fd7c502768eaffed6df2a415

    • Size

      156KB

    • MD5

      411c9be1fd7c502768eaffed6df2a415

    • SHA1

      9f9f76dd49bc79b357280744b57f17a95d210a57

    • SHA256

      e47f2ef05bb54c3846381a68b649e4fbfddc88f28e5234561dd6db300ebc3cd9

    • SHA512

      fa6628cd39d0de58f0b1f370705a34e72ef252f46c471e601e8bf3b7c95aeda79b72e5551f370c31d3e9d9ff64070ecd7e1d63ca2140269289619236434502e1

    • SSDEEP

      192:ENrN1miRx8TeAOU190BBkxCQOXW8Vn3NLg5qPCVu1miRx:8UTRyBbQiVnShVW

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks