General

  • Target

    6b912f39706edab3583ff918d14c42c20b781a3524a91d4681d1396bda93a3cf

  • Size

    51KB

  • Sample

    240525-2qkjqsdc5x

  • MD5

    36390979c351399ceb018695c7062c2d

  • SHA1

    f0d3df8db842cca609772b62016ce34f469f4052

  • SHA256

    6b912f39706edab3583ff918d14c42c20b781a3524a91d4681d1396bda93a3cf

  • SHA512

    228d304a4887039c279b3b043f310a1d0a9cc66366b39a34c5e8990ee88535ab3921619568534aeef17e0e04f36ba58e5df763a3a8bcd8a3137ac6562ad17ce1

  • SSDEEP

    768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3s:nNJb/HkwoLe29UjQ4wqQOLIMVnS3s

Score
10/10

Malware Config

Targets

    • Target

      6b912f39706edab3583ff918d14c42c20b781a3524a91d4681d1396bda93a3cf

    • Size

      51KB

    • MD5

      36390979c351399ceb018695c7062c2d

    • SHA1

      f0d3df8db842cca609772b62016ce34f469f4052

    • SHA256

      6b912f39706edab3583ff918d14c42c20b781a3524a91d4681d1396bda93a3cf

    • SHA512

      228d304a4887039c279b3b043f310a1d0a9cc66366b39a34c5e8990ee88535ab3921619568534aeef17e0e04f36ba58e5df763a3a8bcd8a3137ac6562ad17ce1

    • SSDEEP

      768:nNAGAkIo/juokwoL7627d9rIiClJAxiFkJT22euOiya6lHOYxY0x0KS3s:nNJb/HkwoLe29UjQ4wqQOLIMVnS3s

    Score
    10/10
    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • UPX dump on OEP (original entry point)

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks