General
-
Target
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76
-
Size
66KB
-
Sample
240609-h9vn9sgc73
-
MD5
b43496c546514801fb27d9f861203f0c
-
SHA1
3b2a4d9cfaa4c8c42261a93b4bcd06743e24bc85
-
SHA256
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76
-
SHA512
088cd0c71ad61e75c5c5ca2301aa3296cca583a1488f5431c5e569a4ec0c86cf1c09a16b6c45b59934fc67165b0950f0ac07d077b342bdb8b917db9a2c5038a8
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXiU:IeklMMYJhqezw/pXzH9iU
Static task
static1
Behavioral task
behavioral1
Sample
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76
-
Size
66KB
-
MD5
b43496c546514801fb27d9f861203f0c
-
SHA1
3b2a4d9cfaa4c8c42261a93b4bcd06743e24bc85
-
SHA256
b6f7dd428886e7e4245734e9a01f354d4d7c30ad937f2be783c29546002fbd76
-
SHA512
088cd0c71ad61e75c5c5ca2301aa3296cca583a1488f5431c5e569a4ec0c86cf1c09a16b6c45b59934fc67165b0950f0ac07d077b342bdb8b917db9a2c5038a8
-
SSDEEP
1536:EHfetdklPp+07gDSrB8Xru2zGeJxgawTzpXzrDJrXiU:IeklMMYJhqezw/pXzH9iU
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1