General
- Target d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad
- Size 199KB
- Sample240601-ef5etshf46
- SHA256 d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad
- MD5 02e04cb9835c61b7a67b4fb33d61b341
- SHA1 fd43bb828ea798f3d0f1d48b9f8a25c610494ae0
- SHA512 1e2b4b71ba579c57cb0897045c2c55a28d780a5da411b504d82ea8301c6201c1cd767c3f38a408d4fe22aea6eaae4d8fbf2573583879f2d319c9d420649c1b9c
- SSDEEP 3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4PmuY:7vEN2U+T6i5LirrllHy4HUcMQY6y
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad.exe
Resource
win7-20240419-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad
- Size 199KB
- SHA256 d857773a9d859db7e56f5750cf02c1bd11e5d2daa4ed778df2da81ec692f34ad
- MD5 02e04cb9835c61b7a67b4fb33d61b341
- SHA1 fd43bb828ea798f3d0f1d48b9f8a25c610494ae0
- SHA512 1e2b4b71ba579c57cb0897045c2c55a28d780a5da411b504d82ea8301c6201c1cd767c3f38a408d4fe22aea6eaae4d8fbf2573583879f2d319c9d420649c1b9c
- SSDEEP 3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6u4PmuY:7vEN2U+T6i5LirrllHy4HUcMQY6y
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1