General

  • Target

    36b1e67e43bbfa193e15791d30a93a93f086e250436bd4742b8014127f4bc027

  • Size

    84KB

  • Sample

    240509-y5bnlafg66

  • MD5

    b5fe8fe663cb9217e453e03aafd8d84b

  • SHA1

    a280271ab703a82ae060e88829446f69a3d433ef

  • SHA256

    36b1e67e43bbfa193e15791d30a93a93f086e250436bd4742b8014127f4bc027

  • SHA512

    f6b76cd1f4fc3462482bef5aef7af2dc5e8522d223d0d4f0cf75a46c1a1587ddc13069ae0ec80183c056cfcaaa601bb8de4a9b91f885b8ed3011b00815163a1b

  • SSDEEP

    1536:gxnhmuHsywOK6AwqmHT+SEDxsFUOHEITmic/PMbz1c6xPXfDBSjGh6:GA+XAwVHT+ZxsFHHGiTbzpJX9SjD

Score
10/10

Malware Config

Targets

    • Target

      36b1e67e43bbfa193e15791d30a93a93f086e250436bd4742b8014127f4bc027

    • Size

      84KB

    • MD5

      b5fe8fe663cb9217e453e03aafd8d84b

    • SHA1

      a280271ab703a82ae060e88829446f69a3d433ef

    • SHA256

      36b1e67e43bbfa193e15791d30a93a93f086e250436bd4742b8014127f4bc027

    • SHA512

      f6b76cd1f4fc3462482bef5aef7af2dc5e8522d223d0d4f0cf75a46c1a1587ddc13069ae0ec80183c056cfcaaa601bb8de4a9b91f885b8ed3011b00815163a1b

    • SSDEEP

      1536:gxnhmuHsywOK6AwqmHT+SEDxsFUOHEITmic/PMbz1c6xPXfDBSjGh6:GA+XAwVHT+ZxsFHHGiTbzpJX9SjD

    Score
    10/10
    • Modifies WinLogon for persistence

    • Detects executables built or packed with MPress PE compressor

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks