General
-
Target
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
-
Size
206KB
-
Sample
240603-e3wq7sbc9v
-
MD5
b1fb949318c9c602d31f3b6b63fc18da
-
SHA1
3fd6762c5a360bd0d75370f14cd1a8ebbc46d756
-
SHA256
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
-
SHA512
0c073823d53b5db43b4e6784724a45d247006e544cb04480d754bb8b83f7a25c3fc2cba2c9f91b6293669b8f07f353d322f57f96de45f70e2602116abfb3ab2e
-
SSDEEP
3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLq:5vEN2U+T6i5LirrllHy4HUcMQY6Kq
Static task
static1
Behavioral task
behavioral1
Sample
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
-
Size
206KB
-
MD5
b1fb949318c9c602d31f3b6b63fc18da
-
SHA1
3fd6762c5a360bd0d75370f14cd1a8ebbc46d756
-
SHA256
da8ad84661349f94b16cdf06775e482835e083c0d22d35b08c41c81837b9f3a3
-
SHA512
0c073823d53b5db43b4e6784724a45d247006e544cb04480d754bb8b83f7a25c3fc2cba2c9f91b6293669b8f07f353d322f57f96de45f70e2602116abfb3ab2e
-
SSDEEP
3072:5vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unLq:5vEN2U+T6i5LirrllHy4HUcMQY6Kq
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1