General
- Target 8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593
- Size 206KB
- Sample240614-bhsbhasgll
- SHA256 8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593
- MD5 1e8591b6b74c32c98a8a42ed15b2ffa8
- SHA1 3eeba70f26637e12555ac8489df81a83e48ddc39
- SHA512 b103391b69b05058bba153ce8fe1cd3acf24f94aa259e74d2e3cbe4699035fb60628359caa748bbe687df8a5b277aed2d8be768881a7451ae7371593959d2341
- SSDEEP 3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unw:zvEN2U+T6i5LirrllHy4HUcMQY6D
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593.exe
Resource
win7-20240611-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593
- Size 206KB
- SHA256 8bc8e0bafcdb9c65d2ac63bbeaae9ca7d2d4527b73d1680ddd3deb84e6e66593
- MD5 1e8591b6b74c32c98a8a42ed15b2ffa8
- SHA1 3eeba70f26637e12555ac8489df81a83e48ddc39
- SHA512 b103391b69b05058bba153ce8fe1cd3acf24f94aa259e74d2e3cbe4699035fb60628359caa748bbe687df8a5b277aed2d8be768881a7451ae7371593959d2341
- SSDEEP 3072:zvEfVUzSLhIVbV6i5LirrlZrHyrUHUckoMQ2RN6unw:zvEN2U+T6i5LirrllHy4HUcMQY6D
- MD5 SHA1 SHA512 SSDEEP
Score10/10Modifies WinLogon for persistence
Modifies visiblity of hidden/system files in Explorer
Modifies Installed Components in the registry
Executes dropped EXE
Loads dropped DLL
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
3Registry Run Keys / Startup Folder
2Winlogon Helper DLL
1