9a69fc3d250258202e613731878231d2f99e722ba249b2ac477da90f5cd3033e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9a69fc3d250258202e613731878231d2f99e722ba249b2ac477da90f5cd3033e
Size

103KB
Sample

221018-bcz46aebbq
MD5

734c9c8c09894ae00b80aceea5100da7
SHA1

9d6aa9f7bc5656f6c89fc3fff4b5ac6625ae9b09
SHA256

9a69fc3d250258202e613731878231d2f99e722ba249b2ac477da90f5cd3033e
SHA512

cbd44fa2a40e739aaab29147b9fcd60efb7733ef3d2b60db2d6c2f391079779673cd27fa55d440a05eba8ef70549adeb8f79acf3eb38b5dc5e240300e635c05a
SSDEEP

1536:RaiqH1s+kCtrA2UMT0mTFibDKa1AH4ZLE8+oX:o1B31bdBob2QAwLxX

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  9a69fc3d250258202e613731878231d2f99e722ba249b2ac477da90f5cd3033e
- Size
  
  103KB
- MD5
  
  734c9c8c09894ae00b80aceea5100da7
- SHA1
  
  9d6aa9f7bc5656f6c89fc3fff4b5ac6625ae9b09
- SHA256
  
  9a69fc3d250258202e613731878231d2f99e722ba249b2ac477da90f5cd3033e
- SHA512
  
  cbd44fa2a40e739aaab29147b9fcd60efb7733ef3d2b60db2d6c2f391079779673cd27fa55d440a05eba8ef70549adeb8f79acf3eb38b5dc5e240300e635c05a
- SSDEEP
  
  1536:RaiqH1s+kCtrA2UMT0mTFibDKa1AH4ZLE8+oX:o1B31bdBob2QAwLxX
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2