Overview

overview

7

Static

static

3

8bfef0d8cc...bb.exe

windows7-x64

7

8bfef0d8cc...bb.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8bfef0d8cc59da5c87b53c092b72f7bb

  • Size

    18KB

  • Sample

    240203-lkgynagfdq

  • MD5

    8bfef0d8cc59da5c87b53c092b72f7bb

  • SHA1

    3611e918a6d70217bd93a4e54b6f19ec3c60bb21

  • SHA256

    a5bd21b761683e907e084744355a5125351436cca873a56f13e52160fc86d4e8

  • SHA512

    2e9c6f298c3cc1496b9523c3551f413a93422e85e5f47e8e7ae70828cd691933ace50fa7de085dc08fe2ec4081f17559efc006b9dbaf0375383c22946ff20930

  • SSDEEP

    384:aXQopzSp8m/AopIb6wqbQEm80WKmCl+5Fciw9Baqv4hsedjEBegeDCBOZoBog2l3:hopzQmb6wqbc85Kmn5w9BxOssfDQN+gU

Score
7/10
persistence

Malware Config

Targets

    • Target

      8bfef0d8cc59da5c87b53c092b72f7bb

    • Size

      18KB

    • MD5

      8bfef0d8cc59da5c87b53c092b72f7bb

    • SHA1

      3611e918a6d70217bd93a4e54b6f19ec3c60bb21

    • SHA256

      a5bd21b761683e907e084744355a5125351436cca873a56f13e52160fc86d4e8

    • SHA512

      2e9c6f298c3cc1496b9523c3551f413a93422e85e5f47e8e7ae70828cd691933ace50fa7de085dc08fe2ec4081f17559efc006b9dbaf0375383c22946ff20930

    • SSDEEP

      384:aXQopzSp8m/AopIb6wqbQEm80WKmCl+5Fciw9Baqv4hsedjEBegeDCBOZoBog2l3:hopzQmb6wqbc85Kmn5w9BxOssfDQN+gU

    Score
    7/10
    persistence

    • ACProtect 1.3x - 1.4x DLL software

      Detects file using ACProtect software.

    • Loads dropped DLL

    • Modifies WinLogon

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks