General
-
Target
97f9b5a9bddf50463cc9509876e21820N.exe
-
Size
21KB
-
Sample
240727-f22fqszann
-
MD5
97f9b5a9bddf50463cc9509876e21820
-
SHA1
226572aabb591d4955c17e4b8dc8df7461e0d5ec
-
SHA256
bb371c9e97bbf56b2ab1889c2b506afd554b49789c5a046aff6976a23a5a26fa
-
SHA512
27a55d6433c3aeda3f94a5f1df990bea1bee655406ef23be56657ce57497cc0d7254fe0845b3c715c707fe72213ee3797ca967981e6100486a3d8d2cace47df1
-
SSDEEP
384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX+faRtOf:rRkiLw3HsDSARGG/u4O
Behavioral task
behavioral1
Sample
97f9b5a9bddf50463cc9509876e21820N.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
97f9b5a9bddf50463cc9509876e21820N.exe
Resource
win10v2004-20240709-en
Malware Config
Targets
-
-
Target
97f9b5a9bddf50463cc9509876e21820N.exe
-
Size
21KB
-
MD5
97f9b5a9bddf50463cc9509876e21820
-
SHA1
226572aabb591d4955c17e4b8dc8df7461e0d5ec
-
SHA256
bb371c9e97bbf56b2ab1889c2b506afd554b49789c5a046aff6976a23a5a26fa
-
SHA512
27a55d6433c3aeda3f94a5f1df990bea1bee655406ef23be56657ce57497cc0d7254fe0845b3c715c707fe72213ee3797ca967981e6100486a3d8d2cace47df1
-
SSDEEP
384:UBWoC5GDr6wc/w3HgM6vDUTAXBGCVf4WVlFvX+faRtOf:rRkiLw3HsDSARGG/u4O
-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Drops file in Drivers directory
-
Event Triggered Execution: Image File Execution Options Injection
-
Executes dropped EXE
-
Loads dropped DLL
-
Modifies WinLogon
-
Drops file in System32 directory
-
MITRE ATT&CK Matrix ATT&CK v13
Persistence
Boot or Logon Autostart Execution
2Winlogon Helper DLL
1Active Setup
1Event Triggered Execution
1Image File Execution Options Injection
1Privilege Escalation
Boot or Logon Autostart Execution
2Winlogon Helper DLL
1Active Setup
1Event Triggered Execution
1Image File Execution Options Injection
1