Overview

overview

10

Static

static

3

002785c597...08.exe

windows7-x64

10

002785c597...08.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    002785c59764cccb8bd18eab27d5ce08

  • Size

    523KB

  • Sample

    231229-wtpd7sbda9

  • MD5

    002785c59764cccb8bd18eab27d5ce08

  • SHA1

    c476236bdfe71983cdee2589b2033552cd65df96

  • SHA256

    83a9c3435fd135a339eb389090641881ec809a1023b2b75a1276c337e339a0f0

  • SHA512

    43bbe4b1e5002e8581e897e9c77219a9ab6eb66a793f64d222fd89213945254d83f9d3a77c06377c9188ca193758d808c6536926d9a77e667fedb707e335d81d

  • SSDEEP

    12288:zVRGijbMMDf+J/OF3Z4mxxpoEtlK+kt9T2Mr3:3EMb+0QmXqGC

Score
10/10
persistence

Malware Config

Targets

    • Target

      002785c59764cccb8bd18eab27d5ce08

    • Size

      523KB

    • MD5

      002785c59764cccb8bd18eab27d5ce08

    • SHA1

      c476236bdfe71983cdee2589b2033552cd65df96

    • SHA256

      83a9c3435fd135a339eb389090641881ec809a1023b2b75a1276c337e339a0f0

    • SHA512

      43bbe4b1e5002e8581e897e9c77219a9ab6eb66a793f64d222fd89213945254d83f9d3a77c06377c9188ca193758d808c6536926d9a77e667fedb707e335d81d

    • SSDEEP

      12288:zVRGijbMMDf+J/OF3Z4mxxpoEtlK+kt9T2Mr3:3EMb+0QmXqGC

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Adds Run key to start application

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks