de1ba2691fac41c4a727ce60921078a9011f015ec7441d805bf690dc5d8db28c

General

Target
xcontrol_taknazyvaemy.zip
Size 15.3MB
Sample260602-phfvcsc12z
SHA256 de1ba2691fac41c4a727ce60921078a9011f015ec7441d805bf690dc5d8db28c
MD5 29f8e8bb903ad144a7d231e1b01fb3fe
SHA1 75424c1fe20ae19c20ff6c719907cf4d2cbf799f
SHA512 103c07420803c6e0ae88a7a5dacee0c78d55d1a91218660f9b0ea6cd115744d97357a3b2d4991b99625d86b1be1246232342c5c7ad367855723191f0d355bfa8
SSDEEP 393216:2v0FDksyL4G9xpWt3rqMkc9poowoyJ7H8sQvjY9jguSpy:iIksy4G92PNwBj8sQbluSpy
TLSH
T1F2F63311B7C2BF157DB7CD32E7A0BC24868847ADDA969C691739439A0F8F70249FC921
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Targets

- Target
  net10.0-windows10.0.17763.0/cl_default0/Stub.exe
- Size 16.0MB
- SHA256 694da08024ef5b3b235e26bfd225396d7ed18bd0a58129b0399459e7cd22ab7a
- MD5 09353fb64b8996fd49291b62bcf8f1b9
- SHA1 712897cbf72334610769e26ebfdbfd17af9fc5ad
- SHA512 3e5953a19ac43fc71bf304e577a09e56d9ae4251e2c445a43ea6c9b600b78f5be071c5660becb1a376b9f5f79603c846626ee5fe8544daf450d09f4aeb2a53c5
- SSDEEP 98304:KUMYsabSjCmrVHmRcAcTNJsDgbqMD195DjbPghwC51a/H2Sg3cpU/CmV0Nb1BCRu:KzgomRcAMbqQaa/H2Sg3cs0JKoCOtd
- TLSH
  T10FF6BE1893880AFBD52BC674C665D332E7F178864735DB4B1988D24F2F7F6908E6E221
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

execution persistence
- Modifies WinLogon for persistence
  persistence
- Drops startup file
- Executes dropped EXE
- Adds Run key to start application
  persistence
behavioral1
- Target
  net10.0-windows10.0.17763.0/resources/upx packer/upx.exe
- Size 609KB
- SHA256 16a29adbdf3b6fde74c290205e24cceb7bef1a216941922aa73d2d808a699bbb
- MD5 3c5e325d6b638567fdbe4a446065b0d6
- SHA1 04e7a89b85f270baa19e734f42a9ed19b6731f27
- SHA512 dc95c059514c9d48361b665a4dd2d4c26a62202e00e5864c2a0a02dc2e4d0f653790c2c645d85c26d4cb919f7b2be84c66975a84544f5eaed6ed197d64c6e499
- SSDEEP 12288:1yIuN1Ya+E/1OB49YEM2MqC5NkmIKvsA2qa7OR2vn/FW47Oxgmvfm:1AXYa+YfYc5CcE8qS3F6Z
- TLSH
  T129D423F378C7C9F1F7C7A6736A16B7C0D040EB359BD7A90662AC2268276F84507A6016
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

5^/10

upx
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral2