e3f43ad5fe9f2593858da9aa56b317dd77262294483ff9071605dedfc046cb25 | Triage

Sharing

General

Target

e3f43ad5fe9f2593858da9aa56b317dd77262294483ff9071605dedfc046cb25
Size

297KB
Sample

221020-a5tmeafdf3
MD5

a0dea581bab10b43dc9d6a36db3d4926
SHA1

74e9578156bd8e4a6c122b37faf26a66189ab6ad
SHA256

e3f43ad5fe9f2593858da9aa56b317dd77262294483ff9071605dedfc046cb25
SHA512

f9c5925ef7097289448b8c721b59033362652052e6296b374633725c07fcb474c809efb1b14a846997489b03c9bebbe0a5c2e73e3ce07e66060a6803f58738b3
SSDEEP

6144:w731bdBaByGctpZROEGcd5dOdUILGK349JMsqLn4nzW2BciCMAJGmh:i1b4e1Gc5dOiILbI9JMsqLn4DBcXfGmh

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  e3f43ad5fe9f2593858da9aa56b317dd77262294483ff9071605dedfc046cb25
- Size
  
  297KB
- MD5
  
  a0dea581bab10b43dc9d6a36db3d4926
- SHA1
  
  74e9578156bd8e4a6c122b37faf26a66189ab6ad
- SHA256
  
  e3f43ad5fe9f2593858da9aa56b317dd77262294483ff9071605dedfc046cb25
- SHA512
  
  f9c5925ef7097289448b8c721b59033362652052e6296b374633725c07fcb474c809efb1b14a846997489b03c9bebbe0a5c2e73e3ce07e66060a6803f58738b3
- SSDEEP
  
  6144:w731bdBaByGctpZROEGcd5dOdUILGK349JMsqLn4nzW2BciCMAJGmh:i1b4e1Gc5dOiILbI9JMsqLn4DBcXfGmh
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2