1f9e6f25014b732d66ca0c90cc67fae0b97d92f285208cf5ed9d296d2e902a27 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f9e6f25014b732d66ca0c90cc67fae0b97d92f285208cf5ed9d296d2e902a27
Size

239KB
Sample

221011-j48jlsdeh2
MD5

70723927bd50ea337f1a59ca1a0a24c0
SHA1

d8a2fb5c3652bb1e0a840658562aed3caff49591
SHA256

1f9e6f25014b732d66ca0c90cc67fae0b97d92f285208cf5ed9d296d2e902a27
SHA512

16f42d49829020adb0e759eb569f64fa4a70b26b4ffacde6d98413d0dfddc9acc9b29c073281b001bc032ed27560e8be5525433beb426f0da8d88d3deaae85a0
SSDEEP

6144:ccfqGJSFKnLQXBgBrX227mz4DgAxOvKWr8:/tJS40x0pDgAxOv/8

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  1f9e6f25014b732d66ca0c90cc67fae0b97d92f285208cf5ed9d296d2e902a27
- Size
  
  239KB
- MD5
  
  70723927bd50ea337f1a59ca1a0a24c0
- SHA1
  
  d8a2fb5c3652bb1e0a840658562aed3caff49591
- SHA256
  
  1f9e6f25014b732d66ca0c90cc67fae0b97d92f285208cf5ed9d296d2e902a27
- SHA512
  
  16f42d49829020adb0e759eb569f64fa4a70b26b4ffacde6d98413d0dfddc9acc9b29c073281b001bc032ed27560e8be5525433beb426f0da8d88d3deaae85a0
- SSDEEP
  
  6144:ccfqGJSFKnLQXBgBrX227mz4DgAxOvKWr8:/tJS40x0pDgAxOv/8
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2