Overview

overview

10

Static

static

3

59b5b1fad3...29.exe

windows7-x64

10

59b5b1fad3...29.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    59b5b1fad399ff172c0d77f5caeb7929

  • Size

    6KB

  • Sample

    240113-3nlvfsgbal

  • MD5

    59b5b1fad399ff172c0d77f5caeb7929

  • SHA1

    88de90be989ce251026a51d77d2cf9eb98ffe398

  • SHA256

    ee7bd7e76baf2d8a881a4c70e004b2d0fc2d015bc6a5dd5aa51d6ab2dc21d554

  • SHA512

    09e91f92cd8609ead4b90d0c13ba1945954b205520b8280bd2a252eb96e8ca797c506c014db933973a7c0f53df21dfac9337d6abf4b6652fb6d6ea2246a4566c

  • SSDEEP

    192:bNfCTvpseNqLoAsCCVPKxdRiQadR+84zXfcc2Je0:tLoAgVFb+84YcS

Score
10/10
evasionpersistence

Malware Config

Targets

    • Target

      59b5b1fad399ff172c0d77f5caeb7929

    • Size

      6KB

    • MD5

      59b5b1fad399ff172c0d77f5caeb7929

    • SHA1

      88de90be989ce251026a51d77d2cf9eb98ffe398

    • SHA256

      ee7bd7e76baf2d8a881a4c70e004b2d0fc2d015bc6a5dd5aa51d6ab2dc21d554

    • SHA512

      09e91f92cd8609ead4b90d0c13ba1945954b205520b8280bd2a252eb96e8ca797c506c014db933973a7c0f53df21dfac9337d6abf4b6652fb6d6ea2246a4566c

    • SSDEEP

      192:bNfCTvpseNqLoAsCCVPKxdRiQadR+84zXfcc2Je0:tLoAgVFb+84YcS

    Score
    10/10
    evasionpersistence

    • Modifies WinLogon for persistence

      persistence

    • Disables Task Manager via registry modification

      evasion

    • Drops file in Drivers directory

    • Adds Run key to start application

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks