General

  • Target

    225626c1840c1d19132dd5631bff1580d16ffeca6a0e5b7d4ef85cd712282a94

  • Size

    2.8MB

  • Sample

    250703-f3kvdahq3t

  • MD5

    4f677cc5974ca6488ab85b641b60bd41

  • SHA1

    517a750475fac27965d73574deea392d7b681f06

  • SHA256

    225626c1840c1d19132dd5631bff1580d16ffeca6a0e5b7d4ef85cd712282a94

  • SHA512

    05e66b34f5d23a73429a89d4265c6c9f04af9d4ee319e3267f92bd50f0ca99a342289c684d7f668ac0a7640a354cf94f2e5147b2df845004dac08a643591e99b

  • SSDEEP

    24576:iEtl9mRda1EpPa2PYJqzMtenwoZ6DcTrk3LM9RlbkwoqR8QKV60MYCByDp7RbIUP:5Es1ABrk3LM9Rlbk/fuGv

Score
10/10

Malware Config

Targets

    • Target

      225626c1840c1d19132dd5631bff1580d16ffeca6a0e5b7d4ef85cd712282a94

    • Size

      2.8MB

    • MD5

      4f677cc5974ca6488ab85b641b60bd41

    • SHA1

      517a750475fac27965d73574deea392d7b681f06

    • SHA256

      225626c1840c1d19132dd5631bff1580d16ffeca6a0e5b7d4ef85cd712282a94

    • SHA512

      05e66b34f5d23a73429a89d4265c6c9f04af9d4ee319e3267f92bd50f0ca99a342289c684d7f668ac0a7640a354cf94f2e5147b2df845004dac08a643591e99b

    • SSDEEP

      24576:iEtl9mRda1EpPa2PYJqzMtenwoZ6DcTrk3LM9RlbkwoqR8QKV60MYCByDp7RbIUP:5Es1ABrk3LM9Rlbk/fuGv

    Score
    10/10
    • Modifies WinLogon for persistence

    • Drops startup file

    • Executes dropped EXE

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Drops autorun.inf file

      Malware can abuse Windows Autorun to spread further via attached volumes.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v16

Tasks