General
-
Target
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392
-
Size
200KB
-
Sample
240610-2ke23atgkp
-
MD5
33aece73372bdf70fcb0960502fea900
-
SHA1
351e24ebe399c233028e545881c448cdeaf7d8bc
-
SHA256
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392
-
SHA512
5a35f12fdfe6d5b9fea8402053afacc871790c5705b906847d493e9a63a843c8e3389f8f794bc606c1275cf05f32ade4906f9f6959c0ba826cedd438b1c77925
-
SSDEEP
3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9i6:7vEN2U+T6i5LirrllHy4HUcMQY6C9i6
Static task
static1
Behavioral task
behavioral1
Sample
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392
-
Size
200KB
-
MD5
33aece73372bdf70fcb0960502fea900
-
SHA1
351e24ebe399c233028e545881c448cdeaf7d8bc
-
SHA256
5f72d11a754f7185b8eb411c5fa0afe9ba31ee72c0383bfaaf08cc25503a6392
-
SHA512
5a35f12fdfe6d5b9fea8402053afacc871790c5705b906847d493e9a63a843c8e3389f8f794bc606c1275cf05f32ade4906f9f6959c0ba826cedd438b1c77925
-
SSDEEP
3072:7vEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6uBL9i6:7vEN2U+T6i5LirrllHy4HUcMQY6C9i6
Score10/10-
Modifies WinLogon for persistence
-
Modifies visiblity of hidden/system files in Explorer
-
Modifies Installed Components in the registry
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1