General
- Target 2a156b901d4bffd52d03178cf9334b79a62f4aa445fe6d16961f67486fda5bc5
- Size 80KB
- Sample260910-m1nltasara
- SHA256 2a156b901d4bffd52d03178cf9334b79a62f4aa445fe6d16961f67486fda5bc5
- MD5 b1771d7cd3da7e5b13733a47d4e8c96c
- SHA1 6f5cb2f21b9b23f8848d00fcb5becbdc9dc32d9b
- SHA512 1a23bd9aeed5fb1b626ed39a06b3608aaf2669d92b09f6f9a753eaf7cfdc55ca83e5937ed375fff25ab6b743c27f311938fece84d92af85796a541944af0c6de
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSdr:ibC4Bk6lMTOW9bK
- TLSH T18E83C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2a156b901d4bffd52d03178cf9334b79a62f4aa445fe6d16961f67486fda5bc5.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 2a156b901d4bffd52d03178cf9334b79a62f4aa445fe6d16961f67486fda5bc5
- Size 80KB
- SHA256 2a156b901d4bffd52d03178cf9334b79a62f4aa445fe6d16961f67486fda5bc5
- MD5 b1771d7cd3da7e5b13733a47d4e8c96c
- SHA1 6f5cb2f21b9b23f8848d00fcb5becbdc9dc32d9b
- SHA512 1a23bd9aeed5fb1b626ed39a06b3608aaf2669d92b09f6f9a753eaf7cfdc55ca83e5937ed375fff25ab6b743c27f311938fece84d92af85796a541944af0c6de
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSdr:ibC4Bk6lMTOW9bK
- TLSH T18E83C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1