General
-
Target
Untitled584.png
-
Size
4.7MB
-
Sample
241115-nsgnzaspft
-
MD5
a427c6d2b88e40f6913ad4cf9e703d2f
-
SHA1
b4af2566c7f4f63edc23c1cef3dc21cfb52c2120
-
SHA256
c42087f873467a2b26ad2fa2bf8a6a04efee59058ee12c25e6e038beaf7fd65f
-
SHA512
2b98dee215811f457f049c7eddcac20ddc28db632f8e6f7360adda81ae8f7d05c92af9ac15bd2f8edc3176fe57ad0934654ff93fed9647dca9acb41df421582a
-
SSDEEP
98304:FS/F5fj4tuuWC4tkGyqI7gs7AAUbNWQA4U/FxIU/+XBa2wuzu2s:FSd5fjewC4tkzgu7UUtHIU/+Bjs
Static task
static1
Behavioral task
behavioral1
Sample
Untitled584.png
Resource
win11-20241007-en
Malware Config
Targets
-
-
Target
Untitled584.png
-
Size
4.7MB
-
MD5
a427c6d2b88e40f6913ad4cf9e703d2f
-
SHA1
b4af2566c7f4f63edc23c1cef3dc21cfb52c2120
-
SHA256
c42087f873467a2b26ad2fa2bf8a6a04efee59058ee12c25e6e038beaf7fd65f
-
SHA512
2b98dee215811f457f049c7eddcac20ddc28db632f8e6f7360adda81ae8f7d05c92af9ac15bd2f8edc3176fe57ad0934654ff93fed9647dca9acb41df421582a
-
SSDEEP
98304:FS/F5fj4tuuWC4tkGyqI7gs7AAUbNWQA4U/FxIU/+XBa2wuzu2s:FSd5fjewC4tkzgu7UUtHIU/+Bjs
Score10/10-
Modifies WinLogon for persistence
-
Disables RegEdit via registry modification
-
Drops desktop.ini file(s)
-
Sets desktop wallpaper using registry
-
MITRE ATT&CK Enterprise v15
Privilege Escalation
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Defense Evasion
Abuse Elevation Control Mechanism
1Bypass User Account Control
1Impair Defenses
1Disable or Modify Tools
1Modify Registry
3