Overview

overview

10

Static

static

3

439dd4d5b2...4b.exe

windows7-x64

10

439dd4d5b2...4b.exe

windows10-2004-x64

5

Sharing

Copy URL
Twitter E-mail

General

  • Target

    439dd4d5b2c3619c5edcd48a6d91de4b

  • Size

    55KB

  • Sample

    240105-nzgybabadj

  • MD5

    439dd4d5b2c3619c5edcd48a6d91de4b

  • SHA1

    45e144a0ca5eac107396d7d59dacfe5d62ba5c76

  • SHA256

    57a4a33a74adc9d5f3c7d7ab0ea41726bbc67e06132f7922c43ba9524a9b4f68

  • SHA512

    e335164777a70dc5a7983e6b6afb0d494b9a7cf523f3155e39933cece2f3dc6250e912453599323a638566f3095633048a683589609c16817030f3da6baaadf3

  • SSDEEP

    1536:jMuur0hWr3bM+ZpC/5qnsLdDlDQHpq0s6+PMVbs:jXK0wrrBu5qnsLdyHpIU

Score
10/10
persistence

Malware Config

Targets

    • Target

      439dd4d5b2c3619c5edcd48a6d91de4b

    • Size

      55KB

    • MD5

      439dd4d5b2c3619c5edcd48a6d91de4b

    • SHA1

      45e144a0ca5eac107396d7d59dacfe5d62ba5c76

    • SHA256

      57a4a33a74adc9d5f3c7d7ab0ea41726bbc67e06132f7922c43ba9524a9b4f68

    • SHA512

      e335164777a70dc5a7983e6b6afb0d494b9a7cf523f3155e39933cece2f3dc6250e912453599323a638566f3095633048a683589609c16817030f3da6baaadf3

    • SSDEEP

      1536:jMuur0hWr3bM+ZpC/5qnsLdDlDQHpq0s6+PMVbs:jXK0wrrBu5qnsLdyHpIU

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks