General
-
Target
65115173fb1e7ac067de48d48409e2f5
-
Size
821KB
-
Sample
240118-lm1hsahec4
-
MD5
65115173fb1e7ac067de48d48409e2f5
-
SHA1
2b954abb70cbc51d71d241372c6f459d82b22bfe
-
SHA256
846789c651a77d10528f9bc3efc108381f1b99593cd38679b2343fcaf6b65dbc
-
SHA512
10ad98c289bcb7988431780a439b59ddb464d8644e4fd864fee19b72a253098e66a8ef070f00d69c46578b86077f451a593919ed48fadae39ed3a433f196026f
-
SSDEEP
24576:o3nbWmJVJFwSddIXvfhqbiaxvRxq9yvzR:uamdZdcBYpbR
Behavioral task
behavioral1
Sample
65115173fb1e7ac067de48d48409e2f5.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
65115173fb1e7ac067de48d48409e2f5.exe
Resource
win10v2004-20231215-en
Malware Config
Targets
-
-
Target
65115173fb1e7ac067de48d48409e2f5
-
Size
821KB
-
MD5
65115173fb1e7ac067de48d48409e2f5
-
SHA1
2b954abb70cbc51d71d241372c6f459d82b22bfe
-
SHA256
846789c651a77d10528f9bc3efc108381f1b99593cd38679b2343fcaf6b65dbc
-
SHA512
10ad98c289bcb7988431780a439b59ddb464d8644e4fd864fee19b72a253098e66a8ef070f00d69c46578b86077f451a593919ed48fadae39ed3a433f196026f
-
SSDEEP
24576:o3nbWmJVJFwSddIXvfhqbiaxvRxq9yvzR:uamdZdcBYpbR
Score10/10-
Modifies WinLogon for persistence
-
Modifies firewall policy service
-
Modifies security service
-
Disables RegEdit via registry modification
-
Disables Task Manager via registry modification
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Create or Modify System Process
2Windows Service
2Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Create or Modify System Process
2Windows Service
2