Resubmissions
01/03/2025, 01:41
250301-b4c4pswnw91013/01/2025, 01:41
250113-b4f6csskhq1012/01/2025, 23:10
250112-254wxswpen1012/01/2025, 22:49
250112-2rs79stjbv1012/01/2025, 21:15
250112-z39y2szkaz1012/01/2025, 20:53
250112-zn9dzayndw1012/01/2025, 20:52
250112-zn8sfayndt1012/01/2025, 20:50
250112-zmy7lsymht10General
- Target f8df85307810f9e4d7de55e28a2ad39eae1439e08e05c8b665addd7094bd9214N.exe
- Size 136KB
- Sample250113-b4f6csskhq
- SHA256 f8df85307810f9e4d7de55e28a2ad39eae1439e08e05c8b665addd7094bd9214
Score
10/10
Malware Config
Targets
-
- Target f8df85307810f9e4d7de55e28a2ad39eae1439e08e05c8b665addd7094bd9214N.exe
- Size 136KB
- SHA256 f8df85307810f9e4d7de55e28a2ad39eae1439e08e05c8b665addd7094bd9214
Score10/10Modifies WinLogon for persistence
Modifies visiblity of hidden/system files in Explorer
Disables RegEdit via registry modification
Executes dropped EXE
Modifies system executable filetype association
Adds Run key to start application
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1Privilege Escalation
Boot or Logon Autostart Execution
2Registry Run Keys / Startup Folder
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1Defense Evasion
Hide Artifacts
1Hidden Files and Directories
1Modify Registry
4