General
- Target d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95
- Size 65KB
- Sample240601-eaay2agg4t
- SHA256 d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95
- MD5 2514b1ea9181355c60f8fecd2079d520
- SHA1 a29773eabbd64ff10fabe570a288c44231c69c87
- SHA512 c3942b709634cebe0a899440ed3de53e1c3b21c4c9aacc17056c61372378099c532c7277e8aac109f64b5b832c577280c20afee871b7a93affe45320c43f7d66
- SSDEEP 1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oujjjjjjjjjjjjjjjjjjj4:7WNqkOJWmo1HpM0MkTUmu0
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95.exe
Resource
win7-20240215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95.exe
Resource
win10v2004-20240426-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95
- Size 65KB
- SHA256 d539ff89bbc13ff88f9ccff3a62e751f0019b9a127149679ef6e41572e939b95
- MD5 2514b1ea9181355c60f8fecd2079d520
- SHA1 a29773eabbd64ff10fabe570a288c44231c69c87
- SHA512 c3942b709634cebe0a899440ed3de53e1c3b21c4c9aacc17056c61372378099c532c7277e8aac109f64b5b832c577280c20afee871b7a93affe45320c43f7d66
- SSDEEP 1536:ECq3yRuqrI01eArdW/O7JnI2e13XiLij40MkTUVqa/Oujjjjjjjjjjjjjjjjjjj4:7WNqkOJWmo1HpM0MkTUmu0
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1