General

  • Target

    5b812f0d9c2156899eaf0da10da576dfb15cf320d4b38f12d813450f90eb3e25N.exe

  • Size

    597KB

  • Sample

    241112-nl9fea1hnq

  • MD5

    5d137aebbe863174e63ef75095a4693e

  • SHA1

    2832f474805958a37f6e2b3ef7b69f882a2bd0b5

  • SHA256

    71aab4d8838b9693a71f9051e6455a6f90e8d9d1b23867a490b51ecf8a4500ec

  • SHA512

    d5189f0a790e3e272c8a522d5a8f95ce8bff2ba557256ef005fe2e66d103ac80bf6964573ac4dcc178a83861fe113dc8960f295000976f64b0fcc89bb64432f0

  • SSDEEP

    12288:fJHPaZZZtAv5OLpdNIrd4Ds5OLpdNIrd4Dw2V:B8IRmXIrdFmXIrdb2V

Malware Config

Targets

    • Target

      5b812f0d9c2156899eaf0da10da576dfb15cf320d4b38f12d813450f90eb3e25N.exe

    • Size

      597KB

    • MD5

      5d137aebbe863174e63ef75095a4693e

    • SHA1

      2832f474805958a37f6e2b3ef7b69f882a2bd0b5

    • SHA256

      71aab4d8838b9693a71f9051e6455a6f90e8d9d1b23867a490b51ecf8a4500ec

    • SHA512

      d5189f0a790e3e272c8a522d5a8f95ce8bff2ba557256ef005fe2e66d103ac80bf6964573ac4dcc178a83861fe113dc8960f295000976f64b0fcc89bb64432f0

    • SSDEEP

      12288:fJHPaZZZtAv5OLpdNIrd4Ds5OLpdNIrd4Dw2V:B8IRmXIrdFmXIrdb2V

    • Modifies WinLogon for persistence

    • Drops file in System32 directory

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks