General

  • Target

    cafa3a9f6e1d227791542ae76b2a47242d5b0b62e9d26965a8a46cc9e60c055e.exe

  • Size

    240KB

  • Sample

    241122-xmhhrawngt

  • MD5

    5a547ec7ca82bdacf788e603f99af09b

  • SHA1

    615dc3fdcd52a3c60d8e59fb4e0fc81f5cb2436f

  • SHA256

    cafa3a9f6e1d227791542ae76b2a47242d5b0b62e9d26965a8a46cc9e60c055e

  • SHA512

    b51234b2d47181debff9c569fc24e88661c2b15bf1359be5b135b75e3b99ee2c55d2b64639ddb4f01faa880caee3b867e599a255b9294866ad59e6647f23c084

  • SSDEEP

    6144:5uOYYecObhLvkiL2XOdldJNifl4wwXCAjVrUEzvbeTIu//Y:cK1y9hrTiN4nBRrUS6Tf/w

Score
10/10

Malware Config

Targets

    • Target

      cafa3a9f6e1d227791542ae76b2a47242d5b0b62e9d26965a8a46cc9e60c055e.exe

    • Size

      240KB

    • MD5

      5a547ec7ca82bdacf788e603f99af09b

    • SHA1

      615dc3fdcd52a3c60d8e59fb4e0fc81f5cb2436f

    • SHA256

      cafa3a9f6e1d227791542ae76b2a47242d5b0b62e9d26965a8a46cc9e60c055e

    • SHA512

      b51234b2d47181debff9c569fc24e88661c2b15bf1359be5b135b75e3b99ee2c55d2b64639ddb4f01faa880caee3b867e599a255b9294866ad59e6647f23c084

    • SSDEEP

      6144:5uOYYecObhLvkiL2XOdldJNifl4wwXCAjVrUEzvbeTIu//Y:cK1y9hrTiN4nBRrUS6Tf/w

    Score
    10/10
    • Modifies WinLogon for persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Modifies WinLogon

MITRE ATT&CK Enterprise v15

Tasks