General
-
Target
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45
-
Size
65KB
-
Sample
240601-dqnpdsge68
-
MD5
ca02885c8af2847932d9c871dd372383
-
SHA1
dd0f654a20c8632e28c3b12e8fda1f51681cf658
-
SHA256
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45
-
SHA512
6f723ad96e4e370dce3f470cf52edb9f8dc2f35bdedda65402f755f27931733bf0a706fe1ee3e86cc528b9991d2d880ed41b6f2d85eb3e8be5c36bc157cdc2dd
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oug:7WNqkOJWmo1HpM0MkTUmug
Static task
static1
Behavioral task
behavioral1
Sample
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45
-
Size
65KB
-
MD5
ca02885c8af2847932d9c871dd372383
-
SHA1
dd0f654a20c8632e28c3b12e8fda1f51681cf658
-
SHA256
c940c221848db7abbd762e750fc20f425a09541ad9d095bbc57c7b627a736d45
-
SHA512
6f723ad96e4e370dce3f470cf52edb9f8dc2f35bdedda65402f755f27931733bf0a706fe1ee3e86cc528b9991d2d880ed41b6f2d85eb3e8be5c36bc157cdc2dd
-
SSDEEP
1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oug:7WNqkOJWmo1HpM0MkTUmug
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1