bdd3bb85423466ec674f932b6e99890d5293c734458920d16b87df928d2ab770 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd3bb85423466ec674f932b6e99890d5293c734458920d16b87df928d2ab770
Size

232KB
Sample

220919-x5z6hseaa7
MD5

afc633611e2322b603dd0bea2ec9efc5
SHA1

757a75533187b42fc2d50769e087fbaf1f4c5f55
SHA256

bdd3bb85423466ec674f932b6e99890d5293c734458920d16b87df928d2ab770
SHA512

d0cc927b68543887c6700a14bbfd182dc45c18b40326753acaa7a60108594004b6ce16d30f2fe825066af52944d1007de09de61ec29e99c4e7abebd331172fdb
SSDEEP

6144:AawBiN/PMV5MkCadMa6/sjNZspFJDJBg6jHYW9nugl:AfVV5MqMP/nFJDJBrYW9ll

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  bdd3bb85423466ec674f932b6e99890d5293c734458920d16b87df928d2ab770
- Size
  
  232KB
- MD5
  
  afc633611e2322b603dd0bea2ec9efc5
- SHA1
  
  757a75533187b42fc2d50769e087fbaf1f4c5f55
- SHA256
  
  bdd3bb85423466ec674f932b6e99890d5293c734458920d16b87df928d2ab770
- SHA512
  
  d0cc927b68543887c6700a14bbfd182dc45c18b40326753acaa7a60108594004b6ce16d30f2fe825066af52944d1007de09de61ec29e99c4e7abebd331172fdb
- SSDEEP
  
  6144:AawBiN/PMV5MkCadMa6/sjNZspFJDJBg6jHYW9nugl:AfVV5MqMP/nFJDJBrYW9ll
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2