0d19ae5ac217c1432fce6669a02e2d0ce8f6384e3dade6bfd2ef6c8482e8412d | Triage

Sharing

General

Target

0d19ae5ac217c1432fce6669a02e2d0ce8f6384e3dade6bfd2ef6c8482e8412d
Size

23KB
Sample

221002-rkwppsacb3
MD5

0739fa4a6ba295232a5b3cd05e5068ea
SHA1

d153e8c4d5eeaba92e108b83c2cd60bc1f9023a0
SHA256

0d19ae5ac217c1432fce6669a02e2d0ce8f6384e3dade6bfd2ef6c8482e8412d
SHA512

425148b903bd6a8d70f7e02a331508a1978e1103b90e9f4f7cbe0784dd64678cc55349bfc5720930573e7b5e63a7ae0b15bb87aba5f82529b9b159590d9f3bc1
SSDEEP

384:5BhDLcfIwB1HvjNj5fvmgXQHHD15ERX/GKf9HspnZBRDmH:6wuXV33cHh5ERN9iZLDm

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  0d19ae5ac217c1432fce6669a02e2d0ce8f6384e3dade6bfd2ef6c8482e8412d
- Size
  
  23KB
- MD5
  
  0739fa4a6ba295232a5b3cd05e5068ea
- SHA1
  
  d153e8c4d5eeaba92e108b83c2cd60bc1f9023a0
- SHA256
  
  0d19ae5ac217c1432fce6669a02e2d0ce8f6384e3dade6bfd2ef6c8482e8412d
- SHA512
  
  425148b903bd6a8d70f7e02a331508a1978e1103b90e9f4f7cbe0784dd64678cc55349bfc5720930573e7b5e63a7ae0b15bb87aba5f82529b9b159590d9f3bc1
- SSDEEP
  
  384:5BhDLcfIwB1HvjNj5fvmgXQHHD15ERX/GKf9HspnZBRDmH:6wuXV33cHh5ERN9iZLDm
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2