General

  • Target

    5616f5dee9b35d9eb98e25467b1dc9ea859cd59eda12b259c0e387d18b1d7dcf

  • Size

    22KB

  • Sample

    240525-1pq5fsbf6z

  • MD5

    07d39c85f45d6e5224cb23f8cdbacd5b

  • SHA1

    2ddc0d1c2feb9b972352bf20b1eab1d701c996e4

  • SHA256

    5616f5dee9b35d9eb98e25467b1dc9ea859cd59eda12b259c0e387d18b1d7dcf

  • SHA512

    2c09224b0433ab92c8ff057f3332f2a4c3f8e3f11b59b2da0f03384396e4fa806441be060132fb6f4adc918b2a02d1b1791b6d11aed7608b0cba198fd54e4659

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6sN:rRkiLw3HsDSARGG/MMb7rsN

Malware Config

Targets

    • Target

      5616f5dee9b35d9eb98e25467b1dc9ea859cd59eda12b259c0e387d18b1d7dcf

    • Size

      22KB

    • MD5

      07d39c85f45d6e5224cb23f8cdbacd5b

    • SHA1

      2ddc0d1c2feb9b972352bf20b1eab1d701c996e4

    • SHA256

      5616f5dee9b35d9eb98e25467b1dc9ea859cd59eda12b259c0e387d18b1d7dcf

    • SHA512

      2c09224b0433ab92c8ff057f3332f2a4c3f8e3f11b59b2da0f03384396e4fa806441be060132fb6f4adc918b2a02d1b1791b6d11aed7608b0cba198fd54e4659

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6sN:rRkiLw3HsDSARGG/MMb7rsN

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks