General
-
Target
io
-
Size
80KB
-
Sample
240727-br42na1aqd
-
MD5
882408e017779d21abb1bf3dce4a6216
-
SHA1
f005c837ef6c6efe68b0fec6f4d07e7ea2c91723
-
SHA256
c9cf32e9fdd962c29b41b5842d8a31b261a7d151a9928f13717515ea012606d9
-
SHA512
88005c1267e8ea42996f5b9d17770263cf6a8e609a7e55012423441790cd3ed29c301d318e2099feb1dd258b2478737e9fd4c8b78ee9efd08790e3f99582764c
-
SSDEEP
768:aMJZdapz6z1AKg/TeVjXTFniTO2fXTExZRo+GWz0H0L6a90taMJEKmnAVcAMtI7E:aM5apSiWzDLcRJi6wL/bVhB
Static task
static1
Behavioral task
behavioral1
Sample
io.html
Resource
win11-20240709-en
Malware Config
Targets
-
-
Target
io
-
Size
80KB
-
MD5
882408e017779d21abb1bf3dce4a6216
-
SHA1
f005c837ef6c6efe68b0fec6f4d07e7ea2c91723
-
SHA256
c9cf32e9fdd962c29b41b5842d8a31b261a7d151a9928f13717515ea012606d9
-
SHA512
88005c1267e8ea42996f5b9d17770263cf6a8e609a7e55012423441790cd3ed29c301d318e2099feb1dd258b2478737e9fd4c8b78ee9efd08790e3f99582764c
-
SSDEEP
768:aMJZdapz6z1AKg/TeVjXTFniTO2fXTExZRo+GWz0H0L6a90taMJEKmnAVcAMtI7E:aM5apSiWzDLcRJi6wL/bVhB
-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Executes dropped EXE
-
Legitimate hosting services abused for malware hosting/C2
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Matrix ATT&CK v13
Privilege Escalation
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Abuse Elevation Control Mechanism
1Bypass User Account Control
1Defense Evasion
Modify Registry
4Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Hide Artifacts
2Hidden Files and Directories
2Subvert Trust Controls
1SIP and Trust Provider Hijacking
1