0254d9f9d728fba65b690287270e6a2183ae356a6d7798a4880217af1bb8096a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0254d9f9d728fba65b690287270e6a2183ae356a6d7798a4880217af1bb8096a
Size

72KB
Sample

221011-l3v81ahcf8
MD5

631591f43e2624512b6d2663e0ccfa3a
SHA1

50fe713de159a4fb93575d903105566ba451c734
SHA256

0254d9f9d728fba65b690287270e6a2183ae356a6d7798a4880217af1bb8096a
SHA512

c39615b4b895c2f24d5fe1e134b9b69ceebd5cde14fb0d4be2adf0169f8db0443d4e9e7ec9c63becd6234399edfd25e16e465bc05795247027c0512b3f52ccc3
SSDEEP

1536:ZLEB2A0/tX7Cp5w4Uy8yFhf1zwQVgvd5nG:ZLR2TXUyZr1zwLvd5nG

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  0254d9f9d728fba65b690287270e6a2183ae356a6d7798a4880217af1bb8096a
- Size
  
  72KB
- MD5
  
  631591f43e2624512b6d2663e0ccfa3a
- SHA1
  
  50fe713de159a4fb93575d903105566ba451c734
- SHA256
  
  0254d9f9d728fba65b690287270e6a2183ae356a6d7798a4880217af1bb8096a
- SHA512
  
  c39615b4b895c2f24d5fe1e134b9b69ceebd5cde14fb0d4be2adf0169f8db0443d4e9e7ec9c63becd6234399edfd25e16e465bc05795247027c0512b3f52ccc3
- SSDEEP
  
  1536:ZLEB2A0/tX7Cp5w4Uy8yFhf1zwQVgvd5nG:ZLR2TXUyZr1zwLvd5nG
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2