Overview

overview

10

Static

static

3

aa0c165901...0N.exe

windows7-x64

10

aa0c165901...0N.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    aa0c16590176a9de2d7df083a8e1a1c0N.exe

  • Size

    203KB

  • Sample

    240727-jldaraxglg

  • MD5

    aa0c16590176a9de2d7df083a8e1a1c0

  • SHA1

    52e39393bfd57c1841897dda555881abf7650ccb

  • SHA256

    196f8e254fc6dd0832756fcc4b7210d22e76b4a018262be395a6d5af6a56f4b9

  • SHA512

    f23ad47dc4bf8662dcda0d128487158062f3ee00d121541d7377353b44f17ce2feaeda1e4aa90046e358e113838a18e41ed6417e69b0b5dc524ddc366325f5e6

  • SSDEEP

    6144:DEL1lvsWYuOiMnGNuuF8XcfI2MPO7qhnhF9mD:SnksHxyXcfIRhFE

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      aa0c16590176a9de2d7df083a8e1a1c0N.exe

    • Size

      203KB

    • MD5

      aa0c16590176a9de2d7df083a8e1a1c0

    • SHA1

      52e39393bfd57c1841897dda555881abf7650ccb

    • SHA256

      196f8e254fc6dd0832756fcc4b7210d22e76b4a018262be395a6d5af6a56f4b9

    • SHA512

      f23ad47dc4bf8662dcda0d128487158062f3ee00d121541d7377353b44f17ce2feaeda1e4aa90046e358e113838a18e41ed6417e69b0b5dc524ddc366325f5e6

    • SSDEEP

      6144:DEL1lvsWYuOiMnGNuuF8XcfI2MPO7qhnhF9mD:SnksHxyXcfIRhFE

    Score
    10/10
    discoverypersistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks