b4e1bf2f94a2e16f0c046c932ed0c08efb026f2224f464d39621a397f97ff8f6 | Triage

Sharing

General

Target

b4e1bf2f94a2e16f0c046c932ed0c08efb026f2224f464d39621a397f97ff8f6
Size

250KB
Sample

221002-pptpssfab3
MD5

65610263784ff79de3b41e4ec6684fb0
SHA1

88bb76c3a4f2dffcae0b4019e6baab19c59dd6d7
SHA256

b4e1bf2f94a2e16f0c046c932ed0c08efb026f2224f464d39621a397f97ff8f6
SHA512

e177f729933866ba65de0bab6256fcd9bd17750f3b947c8d56e5e695d0704fa1de6a21e3f522183c0ec7315005975cc0203c4fc5bf262bfbc2cab12679edb3cf
SSDEEP

3072:T1D0Xdt8jG1SdCbn7zUs/4HnjScZtPjzBWkyHgP3TSpNAzjmuOSalH5MWhiIHonH:BD0XAQn734HnjPX73epGvnslHUyOwues

Score

6^/10

persistence

Malware Config

Targets

- Target
  
  b4e1bf2f94a2e16f0c046c932ed0c08efb026f2224f464d39621a397f97ff8f6
- Size
  
  250KB
- MD5
  
  65610263784ff79de3b41e4ec6684fb0
- SHA1
  
  88bb76c3a4f2dffcae0b4019e6baab19c59dd6d7
- SHA256
  
  b4e1bf2f94a2e16f0c046c932ed0c08efb026f2224f464d39621a397f97ff8f6
- SHA512
  
  e177f729933866ba65de0bab6256fcd9bd17750f3b947c8d56e5e695d0704fa1de6a21e3f522183c0ec7315005975cc0203c4fc5bf262bfbc2cab12679edb3cf
- SSDEEP
  
  3072:T1D0Xdt8jG1SdCbn7zUs/4HnjScZtPjzBWkyHgP3TSpNAzjmuOSalH5MWhiIHonH:BD0XAQn734HnjPX73epGvnslHUyOwues
Score

6^/10

persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2