Overview

overview

10

Static

static

3

fd0a38553e...a7.exe

windows7-x64

8

fd0a38553e...a7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fd0a38553e5e4832edf1ea3bfaae1ba7

  • Size

    579KB

  • Sample

    231228-2gf5ysaaf3

  • MD5

    fd0a38553e5e4832edf1ea3bfaae1ba7

  • SHA1

    99fb6caa68f8722184e04ca2a1b037f0a7a8040e

  • SHA256

    cb7d6c2988c895e4d82753c6819f022ff3ec5aaa14f8cde0b5cf51e16521ee05

  • SHA512

    a4775d5626f0ca301115c92031b8803174035f0fac91bccd130289402cbc254cd5eb455ec2163a74c606dbc94073adb924f6648f37ad942d7dd3e964fd324fc9

  • SSDEEP

    12288:l2k/zOPoipRbR3iAbkZnUGNbW/csxGvXjVTZ5c7TnqnTTrPjco:l22OP9FiGMnUCbGyTV9nnT3Pwo

Score
10/10
evasionpersistencetrojan

Malware Config

Targets

    • Target

      fd0a38553e5e4832edf1ea3bfaae1ba7

    • Size

      579KB

    • MD5

      fd0a38553e5e4832edf1ea3bfaae1ba7

    • SHA1

      99fb6caa68f8722184e04ca2a1b037f0a7a8040e

    • SHA256

      cb7d6c2988c895e4d82753c6819f022ff3ec5aaa14f8cde0b5cf51e16521ee05

    • SHA512

      a4775d5626f0ca301115c92031b8803174035f0fac91bccd130289402cbc254cd5eb455ec2163a74c606dbc94073adb924f6648f37ad942d7dd3e964fd324fc9

    • SSDEEP

      12288:l2k/zOPoipRbR3iAbkZnUGNbW/csxGvXjVTZ5c7TnqnTTrPjco:l22OP9FiGMnUCbGyTV9nnT3Pwo

    Score
    10/10
    evasionpersistencetrojan

    • Modifies WinLogon for persistence

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Checks whether UAC is enabled

      evasiontrojan

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks