General

  • Target

    801d3cf52a6c6456c323e61fabfac886

  • Size

    82KB

  • Sample

    240129-r78yjsdgaq

  • MD5

    801d3cf52a6c6456c323e61fabfac886

  • SHA1

    911156dab48c0aa6642b6e44cb2f0c0562605826

  • SHA256

    90fe6eb11c68044388af2471b3da0c2c8e1e5ce86c6604d3daded71f17387d8a

  • SHA512

    fb23d0ab85c506eddbe9594527103ac2a5fc29ec7e65405d277a4c907d59b760d4bb431b0afde23abfeaa9db71ef4458c7ed3c6c74a9176959be4c285a4c3c47

  • SSDEEP

    1536:ROkkMAkZAIltMQekdYrhcsYujp0x4vscdJ+eotF+5qQ/99HxW1oV5ynyClV:skF57YkdsN0x+YtFE/9zynyCT

Score
10/10

Malware Config

Targets

    • Target

      801d3cf52a6c6456c323e61fabfac886

    • Size

      82KB

    • MD5

      801d3cf52a6c6456c323e61fabfac886

    • SHA1

      911156dab48c0aa6642b6e44cb2f0c0562605826

    • SHA256

      90fe6eb11c68044388af2471b3da0c2c8e1e5ce86c6604d3daded71f17387d8a

    • SHA512

      fb23d0ab85c506eddbe9594527103ac2a5fc29ec7e65405d277a4c907d59b760d4bb431b0afde23abfeaa9db71ef4458c7ed3c6c74a9176959be4c285a4c3c47

    • SSDEEP

      1536:ROkkMAkZAIltMQekdYrhcsYujp0x4vscdJ+eotF+5qQ/99HxW1oV5ynyClV:skF57YkdsN0x+YtFE/9zynyCT

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks