General

  • Target

    a40bb70e5848c8208cfbf229cb981ca9.exe

  • Size

    53KB

  • Sample

    240107-x3qjascdbk

  • MD5

    a40bb70e5848c8208cfbf229cb981ca9

  • SHA1

    89b96e9792a2d5d82f6b54271ee310fd2198b398

  • SHA256

    75ec3f0e86eb71309d3074d5961b412b163922e59631dab2ebc350c57dc8f7df

  • SHA512

    ab9aa62ac77a46fd9e020bd262d2f1eff2c73bea60ada876521ab18e8bb9b89ffa1d42f48f5807ef1cac46dcb6cff28cdc1f16607fa5aa22af13a778f606f5b4

  • SSDEEP

    768:3MXkE7U60L5jTgc/iPQc0Ic+a+GlKyHu0y3u02qU6E4/IJe/nbcuyD7UIu:3MUYU6U5jUdPQc+n35KZg8/nouy8Iu

Malware Config

Targets

    • Target

      a40bb70e5848c8208cfbf229cb981ca9.exe

    • Size

      53KB

    • MD5

      a40bb70e5848c8208cfbf229cb981ca9

    • SHA1

      89b96e9792a2d5d82f6b54271ee310fd2198b398

    • SHA256

      75ec3f0e86eb71309d3074d5961b412b163922e59631dab2ebc350c57dc8f7df

    • SHA512

      ab9aa62ac77a46fd9e020bd262d2f1eff2c73bea60ada876521ab18e8bb9b89ffa1d42f48f5807ef1cac46dcb6cff28cdc1f16607fa5aa22af13a778f606f5b4

    • SSDEEP

      768:3MXkE7U60L5jTgc/iPQc0Ic+a+GlKyHu0y3u02qU6E4/IJe/nbcuyD7UIu:3MUYU6U5jUdPQc+n35KZg8/nouy8Iu

    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • UAC bypass

    • Disables RegEdit via registry modification

    • Disables use of System Restore points

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Checks whether UAC is enabled

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks