Overview

overview

10

Static

static

3

1a365b3dd9...d8.exe

windows7-x64

10

1a365b3dd9...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1a365b3dd9a3b049814b3e4ad813c4d8

  • Size

    1.6MB

  • Sample

    231230-qv95eacga6

  • MD5

    1a365b3dd9a3b049814b3e4ad813c4d8

  • SHA1

    4eed488cb6e8d66dbffd3eb6481e91de9830025c

  • SHA256

    3311fbb32acf6d00f0998e557f0a6ef7c1586232586a9069601db9ad72e7d59f

  • SHA512

    63d655bdda4fe599b1d24b35b448039db872e323caff112203b35614068cd2f77aeac16cadfbb1cfa1ad221c270434bcd39f2608e59ec4b1241099f1ad8c4f67

  • SSDEEP

    12288:blIX21g+kD1t5m1HX71j2TzgNOe099zUdcVlNPu90eDDJph:u5+kRt5mVXBczgNP099zUa1K0Sh

Score
10/10
persistence

Malware Config

Targets

    • Target

      1a365b3dd9a3b049814b3e4ad813c4d8

    • Size

      1.6MB

    • MD5

      1a365b3dd9a3b049814b3e4ad813c4d8

    • SHA1

      4eed488cb6e8d66dbffd3eb6481e91de9830025c

    • SHA256

      3311fbb32acf6d00f0998e557f0a6ef7c1586232586a9069601db9ad72e7d59f

    • SHA512

      63d655bdda4fe599b1d24b35b448039db872e323caff112203b35614068cd2f77aeac16cadfbb1cfa1ad221c270434bcd39f2608e59ec4b1241099f1ad8c4f67

    • SSDEEP

      12288:blIX21g+kD1t5m1HX71j2TzgNOe099zUdcVlNPu90eDDJph:u5+kRt5mVXBczgNP099zUa1K0Sh

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Adds policy Run key to start application

      persistence

    • Modifies Installed Components in the registry

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks