General

  • Target

    e4a6af0da8b6ed8dfbd963da4e60e4a4db6b03a7d88363b2a7d8f971cb7f64bfN.exe

  • Size

    64KB

  • Sample

    241117-llzj4axaqf

  • MD5

    26780e0bbfd5ed18a095253b2fd4a390

  • SHA1

    0ef7e7930aae55f849ce605ab814811455433109

  • SHA256

    e4a6af0da8b6ed8dfbd963da4e60e4a4db6b03a7d88363b2a7d8f971cb7f64bf

  • SHA512

    bc1d1e055cd5916560acfa483bb689d43d026795666958f9a435001cabe3d74c1d98364d5018a4c55f6884eb48f11c661edd62efdd454559fec6d60c1e29df6b

  • SSDEEP

    1536:8g/9T8ROcQupqqusN3mrS/ztMhkywRFUnTmc5n4IIIIIIIIIIIIIIIIII/IIIIIf:8g585LpPCrQt7F84IIIIIIIIIIIIIIIB

Malware Config

Targets

    • Target

      e4a6af0da8b6ed8dfbd963da4e60e4a4db6b03a7d88363b2a7d8f971cb7f64bfN.exe

    • Size

      64KB

    • MD5

      26780e0bbfd5ed18a095253b2fd4a390

    • SHA1

      0ef7e7930aae55f849ce605ab814811455433109

    • SHA256

      e4a6af0da8b6ed8dfbd963da4e60e4a4db6b03a7d88363b2a7d8f971cb7f64bf

    • SHA512

      bc1d1e055cd5916560acfa483bb689d43d026795666958f9a435001cabe3d74c1d98364d5018a4c55f6884eb48f11c661edd62efdd454559fec6d60c1e29df6b

    • SSDEEP

      1536:8g/9T8ROcQupqqusN3mrS/ztMhkywRFUnTmc5n4IIIIIIIIIIIIIIIIII/IIIIIf:8g585LpPCrQt7F84IIIIIIIIIIIIIIIB

    • Modifies WinLogon for persistence

    • Modifies visiblity of hidden/system files in Explorer

    • Disables RegEdit via registry modification

    • ASPack v2.12-2.42

      Detects executables packed with ASPack v2.12-2.42

    • Executes dropped EXE

    • Modifies system executable filetype association

    • Adds Run key to start application

MITRE ATT&CK Enterprise v15

Tasks