General
- Target 9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70
- Size 66KB
- Sample240604-ayjtmafa2v
- SHA256 9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70
- MD5 584b08bcdbfb5fdb85b77ac5d1d41ab9
- SHA1 461a14cd6bb0fd081444c20dd540a45803434524
- SHA512 2fd6ee4d95380e64f8865762c762b5bfa31bce3fec0209c613b0f378b19c1c352ecc1266bc7fdbae80454a650aa390ef766de0830315f14f3b6f9627fb73d5ee
- SSDEEP 1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXitAEAEAEAEAEAEAEAEAEAE/:IeklMMYJhqezw/pXzH9itAEAEAEAEAEx
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70.exe
Resource
win7-20240215-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70
- Size 66KB
- SHA256 9a81ce1e7c9cd1af8594df42df21fdc239514e247cb41c62aeec8482c387ad70
- MD5 584b08bcdbfb5fdb85b77ac5d1d41ab9
- SHA1 461a14cd6bb0fd081444c20dd540a45803434524
- SHA512 2fd6ee4d95380e64f8865762c762b5bfa31bce3fec0209c613b0f378b19c1c352ecc1266bc7fdbae80454a650aa390ef766de0830315f14f3b6f9627fb73d5ee
- SSDEEP 1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXitAEAEAEAEAEAEAEAEAEAE/:IeklMMYJhqezw/pXzH9itAEAEAEAEAEx
- MD5 SHA1 SHA512 SSDEEP
Score10/10Modifies WinLogon for persistence
Modifies visiblity of hidden/system files in Explorer
Modifies Installed Components in the registry
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1