01cec0306b25849804ac2770d877423d9f00adfae6217c72842630d18c048ba4

Resubmissions

08/07/2024, 02:10

240708-cl2vsazdla10

20/01/2022, 14:41

220120-r2fd2sadbk10

Sharing

Copy URL Twitter E-mail

General

Target
EvilNominatusCrypto.exe
Size 14KB
Sample240708-cl2vsazdla
SHA256 01cec0306b25849804ac2770d877423d9f00adfae6217c72842630d18c048ba4
MD5 8e23d84e5c58270136539c4cb3e604a4
SHA1 4cc242e1f24af73d2a3e38e4ad103df0ae62d93c
SHA512 159cd61686bec5c83c529e69f1ce653c9b8176c386b0d28b192fa25f07c2784749855f27cd144e6c581c37fd411db857c1476777719feb6f6a291bf8acf4344f
SSDEEP 384:FAoXJvGfqLzUhT/l85PKDpyE9l5DSvI7irtDZXm:4qBKD5934jrtNX
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  EvilNominatusCrypto.exe
- Size 14KB
- SHA256 01cec0306b25849804ac2770d877423d9f00adfae6217c72842630d18c048ba4
- MD5 8e23d84e5c58270136539c4cb3e604a4
- SHA1 4cc242e1f24af73d2a3e38e4ad103df0ae62d93c
- SHA512 159cd61686bec5c83c529e69f1ce653c9b8176c386b0d28b192fa25f07c2784749855f27cd144e6c581c37fd411db857c1476777719feb6f6a291bf8acf4344f
- SSDEEP 384:FAoXJvGfqLzUhT/l85PKDpyE9l5DSvI7irtDZXm:4qBKD5934jrtNX
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

evasion persistence
- Modifies WinLogon for persistence
  persistence
- Disables RegEdit via registry modification
  evasion
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Winlogon Helper DLL

T1547.004

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies WinLogon for persistence

Disables RegEdit via registry modification

Checks computer location settings

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2