General
-
Target
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6eN
-
Size
3.9MB
-
Sample
241021-jvqmfawbqb
-
MD5
cdcea42d7ff16640077ba67aa4c19880
-
SHA1
2ab38e53a5ba5ff971daa23e5537c980329e6043
-
SHA256
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6e
-
SHA512
8b8390fc5a3b98bf2dd1d0f6ec822dd057509f6029a47e3df1c2a7f70d821ef25b4bcbb1c131076e6f081c7c0bcfc0d3b9723dfbebc1f3d04972c527bc37501e
-
SSDEEP
24576:qIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII7:nFU
Static task
static1
Behavioral task
behavioral1
Sample
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6eN.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6eN.exe
Resource
win10v2004-20241007-en
Malware Config
Targets
-
-
Target
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6eN
-
Size
3.9MB
-
MD5
cdcea42d7ff16640077ba67aa4c19880
-
SHA1
2ab38e53a5ba5ff971daa23e5537c980329e6043
-
SHA256
8d067a17765a9dbb1fe2a730c0b96cb6b7517b3d614404d59f834a1d925c8b6e
-
SHA512
8b8390fc5a3b98bf2dd1d0f6ec822dd057509f6029a47e3df1c2a7f70d821ef25b4bcbb1c131076e6f081c7c0bcfc0d3b9723dfbebc1f3d04972c527bc37501e
-
SSDEEP
24576:qIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIII7:nFU
Score10/10-
Modifies WinLogon for persistence
-
Drops file in Drivers directory
-
Drops startup file
-
Adds Run key to start application
-
Legitimate hosting services abused for malware hosting/C2
-
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1