Overview

overview

10

Static

static

3

29f792215a...e5.exe

windows7-x64

10

29f792215a...e5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    29f792215a50cdfcdb62c11d08ba98e5

  • Size

    73KB

  • Sample

    231231-f496naffa2

  • MD5

    29f792215a50cdfcdb62c11d08ba98e5

  • SHA1

    83cc68d6845c35a0af6f8f5a7ffb4ed0b5324311

  • SHA256

    aaf50e6f0272b4e4d6b529fe4e9cf7aec76f528fd08de33b369338e375990ba0

  • SHA512

    ad2b31cb4d50d94434430ea42e58143723f0dbb74069445a3d4a0eb774bcf5f41110d3d10764fad5d680b3d18a69975729d2e0d8d3887e186fe4bd4206a9b3ea

  • SSDEEP

    1536:CulqLQITOlj3wkreF6olBmmo1xrnNfCCAGOsz4Ni4gURX:jmFTORAkI6OfqtNfHAYiRX

Score
10/10
persistence

Malware Config

Targets

    • Target

      29f792215a50cdfcdb62c11d08ba98e5

    • Size

      73KB

    • MD5

      29f792215a50cdfcdb62c11d08ba98e5

    • SHA1

      83cc68d6845c35a0af6f8f5a7ffb4ed0b5324311

    • SHA256

      aaf50e6f0272b4e4d6b529fe4e9cf7aec76f528fd08de33b369338e375990ba0

    • SHA512

      ad2b31cb4d50d94434430ea42e58143723f0dbb74069445a3d4a0eb774bcf5f41110d3d10764fad5d680b3d18a69975729d2e0d8d3887e186fe4bd4206a9b3ea

    • SSDEEP

      1536:CulqLQITOlj3wkreF6olBmmo1xrnNfCCAGOsz4Ni4gURX:jmFTORAkI6OfqtNfHAYiRX

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Sets service image path in registry

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks