General

  • Target

    79083bea771068f431daf2b3b8dd281c75a43eb2c5b5780264ee97f80621ca8c.exe

  • Size

    90KB

  • Sample

    241112-n5wzesscnr

  • MD5

    148f4570c46e3aa68b290892931faad9

  • SHA1

    546a5d5afad146d2bd673c3bcbb262bfd7dc1860

  • SHA256

    79083bea771068f431daf2b3b8dd281c75a43eb2c5b5780264ee97f80621ca8c

  • SHA512

    62e8293194bea22f75c8ab8f39c06514148b818419d985a88cb28ec3554d98b65298a282fa05a1e0c5f44d04c3ff01f4493da9dd663d8002a7fb31a32c78ed94

  • SSDEEP

    1536:XRsjdLaslqdBXvTUL0Hnouy8VjzRsjdLaslqdBXvTUL0Hnouy8Vj8:XOJKqsout9zOJKqsout98

Malware Config

Targets

    • Target

      79083bea771068f431daf2b3b8dd281c75a43eb2c5b5780264ee97f80621ca8c.exe

    • Size

      90KB

    • MD5

      148f4570c46e3aa68b290892931faad9

    • SHA1

      546a5d5afad146d2bd673c3bcbb262bfd7dc1860

    • SHA256

      79083bea771068f431daf2b3b8dd281c75a43eb2c5b5780264ee97f80621ca8c

    • SHA512

      62e8293194bea22f75c8ab8f39c06514148b818419d985a88cb28ec3554d98b65298a282fa05a1e0c5f44d04c3ff01f4493da9dd663d8002a7fb31a32c78ed94

    • SSDEEP

      1536:XRsjdLaslqdBXvTUL0Hnouy8VjzRsjdLaslqdBXvTUL0Hnouy8Vj8:XOJKqsout9zOJKqsout98

    • Modifies WinLogon for persistence

    • Modifies visibility of file extensions in Explorer

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • Disables use of System Restore points

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies system executable filetype association

    • Adds Run key to start application

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks