General

  • Target

    70813b9f0cd5ab44f46fddaa6b33e2b1b0382596fc261094c9a77e30539fd1b7

  • Size

    51KB

  • Sample

    240525-21fnjadg3s

  • MD5

    5c35781e7e3cbffc0195306ebd5cf142

  • SHA1

    32a092d1e14e064ed87b8d67edc0cd0d9915d0d7

  • SHA256

    70813b9f0cd5ab44f46fddaa6b33e2b1b0382596fc261094c9a77e30539fd1b7

  • SHA512

    4cadd8d3ba5d6e8549fa119ef04bac3853eb0d687b49545d0d4fbfd9bf46ed5d3677471b9411153ed7f9fb35974726699e0b2e9493b365b535930e52f15a5205

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3A:nNJb/HkwoLe29UjQ4wqQOLIMVnS3A

Score
10/10

Malware Config

Targets

    • Target

      70813b9f0cd5ab44f46fddaa6b33e2b1b0382596fc261094c9a77e30539fd1b7

    • Size

      51KB

    • MD5

      5c35781e7e3cbffc0195306ebd5cf142

    • SHA1

      32a092d1e14e064ed87b8d67edc0cd0d9915d0d7

    • SHA256

      70813b9f0cd5ab44f46fddaa6b33e2b1b0382596fc261094c9a77e30539fd1b7

    • SHA512

      4cadd8d3ba5d6e8549fa119ef04bac3853eb0d687b49545d0d4fbfd9bf46ed5d3677471b9411153ed7f9fb35974726699e0b2e9493b365b535930e52f15a5205

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3A:nNJb/HkwoLe29UjQ4wqQOLIMVnS3A

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks