General
- Target da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
- Size 206KB
- Sample240603-e3wq7sbc9v
- SHA256 da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
- MD5 b1fb949318c9c602d31f3b6b63fc18da
- SHA1 3fd6762c5a360bd0d75370f14cd1a8ebbc46d756
- SHA512 0c073823d53b5db43b4e6784724a45d247006e544cb04480d754bb8b83f7a25c3fc2cba2c9f91b6293669b8f07f353d322f57f96de45f70e2602116abfb3ab2e
- SSDEEP 3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLq:5vEN2U+T6i5LirrllHy4HUcMQY6Kq
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3.exe
Resource
win7-20240221-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
- Size 206KB
- SHA256 da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
- MD5 b1fb949318c9c602d31f3b6b63fc18da
- SHA1 3fd6762c5a360bd0d75370f14cd1a8ebbc46d756
- SHA512 0c073823d53b5db43b4e6784724a45d247006e544cb04480d754bb8b83f7a25c3fc2cba2c9f91b6293669b8f07f353d322f57f96de45f70e2602116abfb3ab2e
- SSDEEP 3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLq:5vEN2U+T6i5LirrllHy4HUcMQY6Kq
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1