General

  • Target

    430ed5d816c63e0f4f016a295416abad

  • Size

    85KB

  • Sample

    240105-ht8aesgah8

  • MD5

    430ed5d816c63e0f4f016a295416abad

  • SHA1

    f848726933542fec77f942f6b51d23386b2f420f

  • SHA256

    38929d98822063ef15ea05aef14eefe65bb982927721ff4bd5802523a73f1670

  • SHA512

    382b2be984a10a7c7aebabf0b9bcd6b3270850f2013b8a2bf907d34a3fbb01c32366a3cb34fef8214af10cb2456d1520f3ae4fe2db9fcbe52cfcbba68a39b184

  • SSDEEP

    1536:d/lzBrR4uibG9lex2fXoi2RRINMeFwG/cY+8IXV+7Aal0s:PB+7MXaZ96cfXc7Aal0s

Score
7/10

Malware Config

Targets

    • Target

      430ed5d816c63e0f4f016a295416abad

    • Size

      85KB

    • MD5

      430ed5d816c63e0f4f016a295416abad

    • SHA1

      f848726933542fec77f942f6b51d23386b2f420f

    • SHA256

      38929d98822063ef15ea05aef14eefe65bb982927721ff4bd5802523a73f1670

    • SHA512

      382b2be984a10a7c7aebabf0b9bcd6b3270850f2013b8a2bf907d34a3fbb01c32366a3cb34fef8214af10cb2456d1520f3ae4fe2db9fcbe52cfcbba68a39b184

    • SSDEEP

      1536:d/lzBrR4uibG9lex2fXoi2RRINMeFwG/cY+8IXV+7Aal0s:PB+7MXaZ96cfXc7Aal0s

    Score
    7/10
    • Executes dropped EXE

    • Adds Run key to start application

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks