882badb9d5485218374d73d7560eff9ab05ecf68f9ae0ecb804cb063e6c140fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

882badb9d5485218374d73d7560eff9ab05ecf68f9ae0ecb804cb063e6c140fe
Size

104KB
Sample

221014-lpn8jahfgn
MD5

6dd12da2f66beaee44c6efce12f0d1d7
SHA1

95153849645f61f4130cf1b73b856a3df9a5957b
SHA256

882badb9d5485218374d73d7560eff9ab05ecf68f9ae0ecb804cb063e6c140fe
SHA512

1e125f46687c4120ada5935653f8504fc00cfb735d6ed36cf373649594190f0dba0eaba54ab3e5f5679398739d168784fa73772f8dfb53e2fd8d2bccd03da65f
SSDEEP

1536:4aiqH1s+kCtrA2UMT0mTFibDKa1XEsUbEHyMzLlnsWqVBFKYoG1WO5uT8fY6iVD:51B31bdBob2QXTHyYBnDqVOU5uYOF

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  882badb9d5485218374d73d7560eff9ab05ecf68f9ae0ecb804cb063e6c140fe
- Size
  
  104KB
- MD5
  
  6dd12da2f66beaee44c6efce12f0d1d7
- SHA1
  
  95153849645f61f4130cf1b73b856a3df9a5957b
- SHA256
  
  882badb9d5485218374d73d7560eff9ab05ecf68f9ae0ecb804cb063e6c140fe
- SHA512
  
  1e125f46687c4120ada5935653f8504fc00cfb735d6ed36cf373649594190f0dba0eaba54ab3e5f5679398739d168784fa73772f8dfb53e2fd8d2bccd03da65f
- SSDEEP
  
  1536:4aiqH1s+kCtrA2UMT0mTFibDKa1XEsUbEHyMzLlnsWqVBFKYoG1WO5uT8fY6iVD:51B31bdBob2QXTHyYBnDqVOU5uYOF
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2