General
- Target 9dbe61687c2cbbb577bfd76b7e3c0c41fa7b34e3fcddc585f81b650291e74052
- Size 80KB
- Sample260912-s7lnpazdnc
- SHA256 9dbe61687c2cbbb577bfd76b7e3c0c41fa7b34e3fcddc585f81b650291e74052
- MD5 5bd66492bc72895daf98cf85743aba8a
- SHA1 6b81f128a1d0cbdd9fad96ff73c4b973f5ba1237
- SHA512 5eeb09c0493e70360ed6e9d4b1183061364acac72f7c324ff1c20bb0a130dbaac0af2918bfa575453bd368733b6a376f937445788fcca3a6ae84c0ff3f7112a9
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSdv:ibC4Bk6lMTOW9bu
- TLSH T18D83C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9dbe61687c2cbbb577bfd76b7e3c0c41fa7b34e3fcddc585f81b650291e74052.exe
Resource
win10v2004-20260911-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 9dbe61687c2cbbb577bfd76b7e3c0c41fa7b34e3fcddc585f81b650291e74052
- Size 80KB
- SHA256 9dbe61687c2cbbb577bfd76b7e3c0c41fa7b34e3fcddc585f81b650291e74052
- MD5 5bd66492bc72895daf98cf85743aba8a
- SHA1 6b81f128a1d0cbdd9fad96ff73c4b973f5ba1237
- SHA512 5eeb09c0493e70360ed6e9d4b1183061364acac72f7c324ff1c20bb0a130dbaac0af2918bfa575453bd368733b6a376f937445788fcca3a6ae84c0ff3f7112a9
- SSDEEP 768:4W4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAnW4wnebSdv:ibC4Bk6lMTOW9bu
- TLSH T18D83C74BF65281B9CA38C537A561C1B21F253D75AA63CA3F32513A2B2D75B001E1AF37
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Modifies system executable filetype association
-
Drops file in System32 directory
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Winlogon Helper DLL
1Event Triggered Execution
1Change Default File Association
1