Overview

overview

10

Static

static

3

bba94079c0...72.exe

windows7-x64

10

bba94079c0...72.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    bba94079c0ac7b666196e69500b9d672

  • Size

    240KB

  • Sample

    240308-tdxdrsbh7x

  • MD5

    bba94079c0ac7b666196e69500b9d672

  • SHA1

    6f36468c74591936412813a8facb7ae946a4304d

  • SHA256

    89f3aad42602c38257524952b41ec7a048a9f4844fe0cd1f0fa2054c732514ab

  • SHA512

    c10769486982e84873d6ffe342600dc40d0210d2544809ab04130a85c363f4263f73859c570bcfd9ddfa22ad4b5f5f456ca9f6d7483e8116d58407beb2330860

  • SSDEEP

    6144:CINOykEXqybgUKFMDfI7phg2J6AOsRVreU8p:Db/1KmDQ7p62/OsDr98

Score
10/10
persistence

Malware Config

Targets

    • Target

      bba94079c0ac7b666196e69500b9d672

    • Size

      240KB

    • MD5

      bba94079c0ac7b666196e69500b9d672

    • SHA1

      6f36468c74591936412813a8facb7ae946a4304d

    • SHA256

      89f3aad42602c38257524952b41ec7a048a9f4844fe0cd1f0fa2054c732514ab

    • SHA512

      c10769486982e84873d6ffe342600dc40d0210d2544809ab04130a85c363f4263f73859c570bcfd9ddfa22ad4b5f5f456ca9f6d7483e8116d58407beb2330860

    • SSDEEP

      6144:CINOykEXqybgUKFMDfI7phg2J6AOsRVreU8p:Db/1KmDQ7p62/OsDr98

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks