General

  • Target

    7bda5c4eeed264e7059f69058e81de90N.exe

  • Size

    209KB

  • Sample

    240727-b4j71s1hme

  • MD5

    7bda5c4eeed264e7059f69058e81de90

  • SHA1

    16f75f4dd3cd522029554b6df6103fafd6f01f0d

  • SHA256

    98e5c6fbb2afef56c5b38ccaf40b1ade23e860e3b1efa2a61f83958c047aaf2a

  • SHA512

    57d0657cde2efabdd0e59614e19c338ae0282a5e48cebe3b3c1b81ca1028c4317d099a35b68b17515e4c18ffe12b78967b9b497665661ef5448fba7ec26c82a9

  • SSDEEP

    3072:oQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:oQh9tVRm2kh34hdeCkcG7DEALLlnN

Malware Config

Targets

    • Target

      7bda5c4eeed264e7059f69058e81de90N.exe

    • Size

      209KB

    • MD5

      7bda5c4eeed264e7059f69058e81de90

    • SHA1

      16f75f4dd3cd522029554b6df6103fafd6f01f0d

    • SHA256

      98e5c6fbb2afef56c5b38ccaf40b1ade23e860e3b1efa2a61f83958c047aaf2a

    • SHA512

      57d0657cde2efabdd0e59614e19c338ae0282a5e48cebe3b3c1b81ca1028c4317d099a35b68b17515e4c18ffe12b78967b9b497665661ef5448fba7ec26c82a9

    • SSDEEP

      3072:oQcjk9tVRNIcjb4Ryfjijjx14hdeCXHKPJFo9zpE7Di0X0JuLL+o7BlpF9e:oQh9tVRm2kh34hdeCkcG7DEALLlnN

    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks