General

  • Target

    5b9b71bb3019fc5bc120325f31303e62

  • Size

    51KB

  • Sample

    240114-xlrd9sdgc2

  • MD5

    5b9b71bb3019fc5bc120325f31303e62

  • SHA1

    e3e635fe037c6ad84897e0e61adec343a6f56b31

  • SHA256

    8ca198e9c029a676fcd9fdb7d956d8cd0f3b68f5c8c60c652340b94123dad5a0

  • SHA512

    d9dbdde94f0cf367d5b602bead9ce12b2ebd35a033743a0ea7c10ddc5d516dde085f22055233f62acea856270ff24faeb96dd85af4e1325c83fbc94c8500dca5

  • SSDEEP

    768:njJ8sD6boMeOltuOUtrmCwGv/5nSGzzrdVFjfxUc19ybHnBVvpE:nj5mboFPOUt/XVvlATHW

Score
10/10

Malware Config

Targets

    • Target

      5b9b71bb3019fc5bc120325f31303e62

    • Size

      51KB

    • MD5

      5b9b71bb3019fc5bc120325f31303e62

    • SHA1

      e3e635fe037c6ad84897e0e61adec343a6f56b31

    • SHA256

      8ca198e9c029a676fcd9fdb7d956d8cd0f3b68f5c8c60c652340b94123dad5a0

    • SHA512

      d9dbdde94f0cf367d5b602bead9ce12b2ebd35a033743a0ea7c10ddc5d516dde085f22055233f62acea856270ff24faeb96dd85af4e1325c83fbc94c8500dca5

    • SSDEEP

      768:njJ8sD6boMeOltuOUtrmCwGv/5nSGzzrdVFjfxUc19ybHnBVvpE:nj5mboFPOUt/XVvlATHW

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks