General

  • Target

    71bf28f17a6f3365ab8c81883135ca1f

  • Size

    22KB

  • Sample

    240124-kb7x2seab5

  • MD5

    71bf28f17a6f3365ab8c81883135ca1f

  • SHA1

    f9650d8cd114332e053b1b128b447536d786cd60

  • SHA256

    9ea31c6f2e1ae1475cac896493106d83c2269a919e89ba85975b79cf78dbd293

  • SHA512

    79c0139b2a6c798e61b2751421602aed55d7caaefb6eb86677ddb39fab93a84d9c1fa2b99e0b67dd13cf9c8b64f1f6c4bf1d861d7b4a7ebad6e9a95b31805cc1

  • SSDEEP

    384:YOBZQJJ3Z1mKCmQoc9Bg0xbpxa5pIAAzQDsmLdYyiT/0IPNMP8+NH3:YOipVClpxCD0QzdJi7BMF3

Score
10/10

Malware Config

Targets

    • Target

      71bf28f17a6f3365ab8c81883135ca1f

    • Size

      22KB

    • MD5

      71bf28f17a6f3365ab8c81883135ca1f

    • SHA1

      f9650d8cd114332e053b1b128b447536d786cd60

    • SHA256

      9ea31c6f2e1ae1475cac896493106d83c2269a919e89ba85975b79cf78dbd293

    • SHA512

      79c0139b2a6c798e61b2751421602aed55d7caaefb6eb86677ddb39fab93a84d9c1fa2b99e0b67dd13cf9c8b64f1f6c4bf1d861d7b4a7ebad6e9a95b31805cc1

    • SSDEEP

      384:YOBZQJJ3Z1mKCmQoc9Bg0xbpxa5pIAAzQDsmLdYyiT/0IPNMP8+NH3:YOipVClpxCD0QzdJi7BMF3

    Score
    10/10
    • Modifies WinLogon for persistence

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks