General
- Target ea86ac099eb8051c033d5a21ee261dc8fdca479b19782f0eccf7cb473105a451
- Size 7.7MB
- Sample260901-p7vd2szbpg
- SHA256 ea86ac099eb8051c033d5a21ee261dc8fdca479b19782f0eccf7cb473105a451
- MD5 a6583a30803bf576f5ded655774db423
- SHA1 f7bf429563fe2ba0035e845b7c4dc1e144425c51
- SHA512 8c9e3a44937aaf09dc80fc6b5bbb29c3f9a26540b2ea9966a8ce5253d5515504d55514cceaacc2c9e32af0e6acda4d7cc7fffc4b13a1a60f8bce734e5753a736
- SSDEEP 98304:bPU+35/aBMQZqDcFP6dIPU+3mhLCpj2xr85XH085++PF7+PikUqo8kUXwoYkUo:bJ8zKA6+JWlCpjfv5tFui29jwlk
- TLSH T17786D14CB3A6087CE72543B51571112A6374BF220B46018B70DCBB3A7BF7A59AB33766
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target ea86ac099eb8051c033d5a21ee261dc8fdca479b19782f0eccf7cb473105a451
- Size 7.7MB
- SHA256 ea86ac099eb8051c033d5a21ee261dc8fdca479b19782f0eccf7cb473105a451
- MD5 a6583a30803bf576f5ded655774db423
- SHA1 f7bf429563fe2ba0035e845b7c4dc1e144425c51
- SHA512 8c9e3a44937aaf09dc80fc6b5bbb29c3f9a26540b2ea9966a8ce5253d5515504d55514cceaacc2c9e32af0e6acda4d7cc7fffc4b13a1a60f8bce734e5753a736
- SSDEEP 98304:bPU+35/aBMQZqDcFP6dIPU+3mhLCpj2xr85XH085++PF7+PikUqo8kUXwoYkUo:bJ8zKA6+JWlCpjfv5tFui29jwlk
- TLSH T17786D14CB3A6087CE72543B51571112A6374BF220B46018B70DCBB3A7BF7A59AB33766
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Lunam
-
Executes dropped EXE
-
Adds Run key to start application
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1