dcf61957f3e1daa4a083aaf48dbea85c825659ceae1477bf6981b39508e5e221 | Triage

Sharing

General

Target

dcf61957f3e1daa4a083aaf48dbea85c825659ceae1477bf6981b39508e5e221
Size

86KB
Sample

221019-1c53vahdh8
MD5

826acd45301c852c1baa18aa61233d26
SHA1

96de1a773f9ff0a611b0c68850f8b17f1c4c89e4
SHA256

dcf61957f3e1daa4a083aaf48dbea85c825659ceae1477bf6981b39508e5e221
SHA512

d272361afd8aa7c5c33a459fcc591bdeae0a505bb700508106abd5db8230c4acf01d7fa7206c73b1925de84409fedff4e62910338ed408e7e1565599142f6d5f
SSDEEP

1536:WW1Gqe+d72sZTxmnPvrmvWtmIbZk9b3iKNA37U9b3iKNA37U9b3iKNA37:WWNdZTx4/t7+3923C3923q3923

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  dcf61957f3e1daa4a083aaf48dbea85c825659ceae1477bf6981b39508e5e221
- Size
  
  86KB
- MD5
  
  826acd45301c852c1baa18aa61233d26
- SHA1
  
  96de1a773f9ff0a611b0c68850f8b17f1c4c89e4
- SHA256
  
  dcf61957f3e1daa4a083aaf48dbea85c825659ceae1477bf6981b39508e5e221
- SHA512
  
  d272361afd8aa7c5c33a459fcc591bdeae0a505bb700508106abd5db8230c4acf01d7fa7206c73b1925de84409fedff4e62910338ed408e7e1565599142f6d5f
- SSDEEP
  
  1536:WW1Gqe+d72sZTxmnPvrmvWtmIbZk9b3iKNA37U9b3iKNA37U9b3iKNA37:WWNdZTx4/t7+3923C3923q3923
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2