General
-
Target
a40bb70e5848c8208cfbf229cb981ca9.exe
-
Size
53KB
-
Sample
240107-x3qjascdbk
-
MD5
a40bb70e5848c8208cfbf229cb981ca9
-
SHA1
89b96e9792a2d5d82f6b54271ee310fd2198b398
-
SHA256
75ec3f0e86eb71309d3074d5961b412b163922e59631dab2ebc350c57dc8f7df
-
SHA512
ab9aa62ac77a46fd9e020bd262d2f1eff2c73bea60ada876521ab18e8bb9b89ffa1d42f48f5807ef1cac46dcb6cff28cdc1f16607fa5aa22af13a778f606f5b4
-
SSDEEP
768:3MXkE7U60L5jTgc/iPQc0Ic+a+GlKyHu0y3u02qU6E4/IJe/nbcuyD7UIu:3MUYU6U5jUdPQc+n35KZg8/nouy8Iu
Static task
static1
Behavioral task
behavioral1
Sample
a40bb70e5848c8208cfbf229cb981ca9.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a40bb70e5848c8208cfbf229cb981ca9.exe
Resource
win10v2004-20231222-en
Malware Config
Targets
-
-
Target
a40bb70e5848c8208cfbf229cb981ca9.exe
-
Size
53KB
-
MD5
a40bb70e5848c8208cfbf229cb981ca9
-
SHA1
89b96e9792a2d5d82f6b54271ee310fd2198b398
-
SHA256
75ec3f0e86eb71309d3074d5961b412b163922e59631dab2ebc350c57dc8f7df
-
SHA512
ab9aa62ac77a46fd9e020bd262d2f1eff2c73bea60ada876521ab18e8bb9b89ffa1d42f48f5807ef1cac46dcb6cff28cdc1f16607fa5aa22af13a778f606f5b4
-
SSDEEP
768:3MXkE7U60L5jTgc/iPQc0Ic+a+GlKyHu0y3u02qU6E4/IJe/nbcuyD7UIu:3MUYU6U5jUdPQc+n35KZg8/nouy8Iu
Score10/10-
Modifies WinLogon for persistence
-
Modifies visibility of file extensions in Explorer
-
Modifies visiblity of hidden/system files in Explorer
-
Disables RegEdit via registry modification
-
Disables use of System Restore points
-
Sets file execution options in registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies system executable filetype association
-
Adds Run key to start application
-
Drops file in System32 directory
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1