General

  • Target

    bec6f351a83c25a950b745e54462846202650fe93d2a1be8b3b99572926458f1

  • Size

    22KB

  • Sample

    240614-d2n5astdnb

  • MD5

    07ae4f90d95dcc6725eea6abbd0aacac

  • SHA1

    ac7c6a675e13d179e725ad740222fea821291806

  • SHA256

    bec6f351a83c25a950b745e54462846202650fe93d2a1be8b3b99572926458f1

  • SHA512

    db8fccee73564795aa0cb4aa7f723ea782327aea8e7903054552601a78a58aa105221e231753716592bd34df4efa517f7e0f0b30297efba5e7be88445abe74ed

  • SSDEEP

    384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUS:rRkiLw3HsDSARGG/MMb7rU

Malware Config

Targets

    • Target

      bec6f351a83c25a950b745e54462846202650fe93d2a1be8b3b99572926458f1

    • Size

      22KB

    • MD5

      07ae4f90d95dcc6725eea6abbd0aacac

    • SHA1

      ac7c6a675e13d179e725ad740222fea821291806

    • SHA256

      bec6f351a83c25a950b745e54462846202650fe93d2a1be8b3b99572926458f1

    • SHA512

      db8fccee73564795aa0cb4aa7f723ea782327aea8e7903054552601a78a58aa105221e231753716592bd34df4efa517f7e0f0b30297efba5e7be88445abe74ed

    • SSDEEP

      384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX8Mb7a6cUS:rRkiLw3HsDSARGG/MMb7rU

    • Windows security bypass

    • Drops file in Drivers directory

    • Modifies Installed Components in the registry

    • Sets file execution options in registry

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Windows security modification

    • Modifies WinLogon

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks