7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
Size

206KB
Sample

221014-lsy7xahhdl
MD5

0197328933ee4176b2d02b2b92acfc02
SHA1

9cfbd98466a275677568c9325f1e1dfe04fa3e29
SHA256

7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
SHA512

30a20728d71a52a72c0320d2dfa9137a4976cd2d1711243dd126c2ac4b0365b9d8da8b0483189d4a87d5a370c2ee8e846dfdb11b41f81f352ffd5d5c84eefd94
SSDEEP

6144:0GFQaS0faLqX7s6z0y+FLN8pPAEkEKKo:0Jqhz0ysLN8qEkio

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
- Size
  
  206KB
- MD5
  
  0197328933ee4176b2d02b2b92acfc02
- SHA1
  
  9cfbd98466a275677568c9325f1e1dfe04fa3e29
- SHA256
  
  7e0a09c984742dd69b94f0be5b55f3917ffdad33b57081d55c244e95feeeebf2
- SHA512
  
  30a20728d71a52a72c0320d2dfa9137a4976cd2d1711243dd126c2ac4b0365b9d8da8b0483189d4a87d5a370c2ee8e846dfdb11b41f81f352ffd5d5c84eefd94
- SSDEEP
  
  6144:0GFQaS0faLqX7s6z0y+FLN8pPAEkEKKo:0Jqhz0ysLN8qEkio
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2