Overview

overview

10

Static

static

10

250801-gpxsfsdj3y.exe

windows10-2004-x64

8

250801-gpxsfsdj3y.exe

windows11-21h2-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target
    250801-gpxsfsdj3y.bin
  • Size 232KB
  • Sample260424-jd7jmacw6p
  • SHA256 13fafb1ae2d5de024e68f2e2fc820bc79ef0690c40dbfd70246bcc394c52ea20
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
apolloshadowsecret_blizzardturladefense_evasiondropperloaderpersistence

Malware Config

Targets

    • Target
      250801-gpxsfsdj3y.bin
    • Size 232KB
    • SHA256 13fafb1ae2d5de024e68f2e2fc820bc79ef0690c40dbfd70246bcc394c52ea20
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    8/10
    defense_evasionpersistence

    • Installs a root certificate to the trusted certificate store

      A root certificate was added to the trusted certificate store using CertUtil.

      defense_evasion

    • Modifies visibility of existing users in the login screen

      A user account was hidden or made visible on the Windows login screen through a registry modification.

      defense_evasion

    • Modifies WinLogon

      persistence
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks