General

  • Target

    e938e608b8a547eb4092b7092f25f75442ed4f0429e6a6a721403d2308d470b4N.exe

  • Size

    64KB

  • Sample

    241117-le1tkswhqg

  • MD5

    b063c0f6c164ef4922b3e12ea24a3600

  • SHA1

    5455c1a467bb6d596c97ff114d962f40a809a282

  • SHA256

    e938e608b8a547eb4092b7092f25f75442ed4f0429e6a6a721403d2308d470b4

  • SHA512

    1c4ce404b7ccf100b78d18cecca18a4269bb4b40980ac61dcfb14afbb871f69ca063f5b5e2a74fba822e7e3daea9d9c47ea4109671f9618384b45789ca70e472

  • SSDEEP

    1536:8g/9T8ROcQupqqusN3mrS/ztMhkywRFUnTmc5n4IIIIIIIIIIIIIIIIII/IIIIIH:8g585LpPCrQt7F84IIIIIIIIIIIIIIIh

Malware Config

Targets

    • Target

      e938e608b8a547eb4092b7092f25f75442ed4f0429e6a6a721403d2308d470b4N.exe

    • Size

      64KB

    • MD5

      b063c0f6c164ef4922b3e12ea24a3600

    • SHA1

      5455c1a467bb6d596c97ff114d962f40a809a282

    • SHA256

      e938e608b8a547eb4092b7092f25f75442ed4f0429e6a6a721403d2308d470b4

    • SHA512

      1c4ce404b7ccf100b78d18cecca18a4269bb4b40980ac61dcfb14afbb871f69ca063f5b5e2a74fba822e7e3daea9d9c47ea4109671f9618384b45789ca70e472

    • SSDEEP

      1536:8g/9T8ROcQupqqusN3mrS/ztMhkywRFUnTmc5n4IIIIIIIIIIIIIIIIII/IIIIIH:8g585LpPCrQt7F84IIIIIIIIIIIIIIIh

    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks