Overview

overview

10

Static

static

3

629afba004...72.exe

windows7-x64

10

629afba004...72.exe

windows10-2004-x64

5

Sharing

Copy URL Twitter E-mail

General

  • Target

    629afba004fe74e6ee3e516ac682fc72

  • Size

    130KB

  • Sample

    231226-k5p94aefhl

  • MD5

    629afba004fe74e6ee3e516ac682fc72

  • SHA1

    2f94283b4d3a34be163eff7e014138cc837653c7

  • SHA256

    40c1157ad9a0346db675668701f5e6a76fbe3cd7ecc13bb11c9eb063fdd4febb

  • SHA512

    8d71f796131d7091de492e2f11aff392ea883383aa8b7eb4ac3f019cc3fef5137e72aeadd7ac59adeb93cca794913b2138844fdebd3d161395884550b52851ed

  • SSDEEP

    1536:biWSwRZ9TTxKzs+QES5f1gNMVAFn4EmC:zSwRDTtd+Q1F1AMVCn4Z

Score
10/10
persistence

Malware Config

Targets

    • Target

      629afba004fe74e6ee3e516ac682fc72

    • Size

      130KB

    • MD5

      629afba004fe74e6ee3e516ac682fc72

    • SHA1

      2f94283b4d3a34be163eff7e014138cc837653c7

    • SHA256

      40c1157ad9a0346db675668701f5e6a76fbe3cd7ecc13bb11c9eb063fdd4febb

    • SHA512

      8d71f796131d7091de492e2f11aff392ea883383aa8b7eb4ac3f019cc3fef5137e72aeadd7ac59adeb93cca794913b2138844fdebd3d161395884550b52851ed

    • SSDEEP

      1536:biWSwRZ9TTxKzs+QES5f1gNMVAFn4EmC:zSwRDTtd+Q1F1AMVCn4Z

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks