General
-
Target
3ca6c2f6b910351c3210ac51bef6aafc
-
Size
372KB
-
Sample
240101-mwdwtahccp
-
MD5
3ca6c2f6b910351c3210ac51bef6aafc
-
SHA1
b55ae6418794a72d0bca1d479cd829023b0c703e
-
SHA256
5a4feb8dc6f6ba1214017e9a783e523d0661891bc78d41883e53afb4b8b411cc
-
SHA512
6d545363c940b30d9fe75bb9fa47b72347a76c77b611cee1a8f9db61f092d79d20ab0718ac1c6d33d7b2b778703f537bc7d14ad51dff11ae5e568fdc339744a0
-
SSDEEP
6144:mlmTMkJtrRTkY9fswtppH8CQUvW4yT93o0jSuxVlQTyy2oL26ET:my/G0swtbH8evW5T93zjSuxVWTyvoL2H
Static task
static1
Behavioral task
behavioral1
Sample
3ca6c2f6b910351c3210ac51bef6aafc.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
3ca6c2f6b910351c3210ac51bef6aafc.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
3ca6c2f6b910351c3210ac51bef6aafc
-
Size
372KB
-
MD5
3ca6c2f6b910351c3210ac51bef6aafc
-
SHA1
b55ae6418794a72d0bca1d479cd829023b0c703e
-
SHA256
5a4feb8dc6f6ba1214017e9a783e523d0661891bc78d41883e53afb4b8b411cc
-
SHA512
6d545363c940b30d9fe75bb9fa47b72347a76c77b611cee1a8f9db61f092d79d20ab0718ac1c6d33d7b2b778703f537bc7d14ad51dff11ae5e568fdc339744a0
-
SSDEEP
6144:mlmTMkJtrRTkY9fswtppH8CQUvW4yT93o0jSuxVlQTyy2oL26ET:my/G0swtbH8evW5T93zjSuxVWTyvoL2H
Score10/10-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Modifies Installed Components in the registry
-
Loads dropped DLL
-
Adds Run key to start application
-
Modifies WinLogon
-
Suspicious use of SetThreadContext
-