65a0c2ecfbb637cbf12fbde4fc555d5b325eee8fa98565a661b5727ddbfb3665 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65a0c2ecfbb637cbf12fbde4fc555d5b325eee8fa98565a661b5727ddbfb3665
Size

71KB
Sample

221002-a4d6bsebg8
MD5

6fd4721867108fb48130551a998880a6
SHA1

8ef58e1676f667656ee0abda2cf37b2c6a4fe9d6
SHA256

65a0c2ecfbb637cbf12fbde4fc555d5b325eee8fa98565a661b5727ddbfb3665
SHA512

fe409a8cc1fe5bd7982cc4f73bd086c251e98f1543de428c380399a8729ce5091bf459693ad0d21f301a50d8d95bf7072525c40b6e784ab1014c635b5c73c994
SSDEEP

768:ZWQZXvoC9v2f3tomPwCEQPKeDm0p0OuqRjK5gxTKdf1zBmQzTGfmgyqKVU:VvoJfd/PgQ750OuqRQsgf1zwQVgvKa

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  65a0c2ecfbb637cbf12fbde4fc555d5b325eee8fa98565a661b5727ddbfb3665
- Size
  
  71KB
- MD5
  
  6fd4721867108fb48130551a998880a6
- SHA1
  
  8ef58e1676f667656ee0abda2cf37b2c6a4fe9d6
- SHA256
  
  65a0c2ecfbb637cbf12fbde4fc555d5b325eee8fa98565a661b5727ddbfb3665
- SHA512
  
  fe409a8cc1fe5bd7982cc4f73bd086c251e98f1543de428c380399a8729ce5091bf459693ad0d21f301a50d8d95bf7072525c40b6e784ab1014c635b5c73c994
- SSDEEP
  
  768:ZWQZXvoC9v2f3tomPwCEQPKeDm0p0OuqRjK5gxTKdf1zBmQzTGfmgyqKVU:VvoJfd/PgQ750OuqRQsgf1zwQVgvKa
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2