General

  • Target

    0b2bb22cf1a499725b070d77942497c6

  • Size

    413KB

  • Sample

    231230-cldsyshbbm

  • MD5

    0b2bb22cf1a499725b070d77942497c6

  • SHA1

    b1d604f023dc64aeacbc2f02f79677c1d99b0049

  • SHA256

    f0b4822ae81e5bb2cd875d7f0ff48a4da21ee9bc9f03c1c4ad4ebd9ee7f27e07

  • SHA512

    cfa0be53bdb5ba30b08c27cbc9afcbf0d6e43b55e3a23f5109034e9f948efd6712f154dd1156f1b5a857741a5beea33695051ab4a7503c9f8411148e47f0775d

  • SSDEEP

    6144:V7/7Wn2iBqScSkltGne4D64jdMcmR5HYfEsq4DKxZtmCmUbLZOTvoU:V7TykFILjdbmR54csq4DK/tOTwU

Score
10/10

Malware Config

Targets

    • Target

      0b2bb22cf1a499725b070d77942497c6

    • Size

      413KB

    • MD5

      0b2bb22cf1a499725b070d77942497c6

    • SHA1

      b1d604f023dc64aeacbc2f02f79677c1d99b0049

    • SHA256

      f0b4822ae81e5bb2cd875d7f0ff48a4da21ee9bc9f03c1c4ad4ebd9ee7f27e07

    • SHA512

      cfa0be53bdb5ba30b08c27cbc9afcbf0d6e43b55e3a23f5109034e9f948efd6712f154dd1156f1b5a857741a5beea33695051ab4a7503c9f8411148e47f0775d

    • SSDEEP

      6144:V7/7Wn2iBqScSkltGne4D64jdMcmR5HYfEsq4DKxZtmCmUbLZOTvoU:V7TykFILjdbmR54csq4DK/tOTwU

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks