General
- Target 4a0b923aed31be6cac9a1b483dac255acb82964043f37ac46128021763a9c781
- Size 80KB
- Sample260910-t9w3wasepc
- SHA256 4a0b923aed31be6cac9a1b483dac255acb82964043f37ac46128021763a9c781
- MD5 3816230b8663d1980d00be057500d2c3
- SHA1 a5a97dc85b4a0b321ed9401ca68acec0cdefe910
- SHA512 103ef1e9a8f5bd91e3c53e57234340f8c4a886520db5a7b5f85257be4d4ba842be4a0663a083b3d7736ee2123673bd8da9aced3af5099480dc4c9f926005d443
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSd8:ibC4Bk6lMTOW9bR
- TLSH T14783C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a0b923aed31be6cac9a1b483dac255acb82964043f37ac46128021763a9c781.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 4a0b923aed31be6cac9a1b483dac255acb82964043f37ac46128021763a9c781
- Size 80KB
- SHA256 4a0b923aed31be6cac9a1b483dac255acb82964043f37ac46128021763a9c781
- MD5 3816230b8663d1980d00be057500d2c3
- SHA1 a5a97dc85b4a0b321ed9401ca68acec0cdefe910
- SHA512 103ef1e9a8f5bd91e3c53e57234340f8c4a886520db5a7b5f85257be4d4ba842be4a0663a083b3d7736ee2123673bd8da9aced3af5099480dc4c9f926005d443
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSd8:ibC4Bk6lMTOW9bR
- TLSH T14783C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1