825e2aa2a216f170473e4d8baf22263821c3fffab1463a518d98638f38d45cc8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

825e2aa2a216f170473e4d8baf22263821c3fffab1463a518d98638f38d45cc8
Size

901KB
Sample

221020-f4gt4sfgck
MD5

4a40e6f00cd7a2675d2b61963dd83156
SHA1

00bec3447d337aa0fe734e7585a579298429fdfc
SHA256

825e2aa2a216f170473e4d8baf22263821c3fffab1463a518d98638f38d45cc8
SHA512

4416f926902ca04ac7e8b4498740ee00b9b320f79b437f7fe8493af00b4b717259a75e2e72f6d38015b67194f7ac2978487f5caeb9ceee3020c63115ba5feb3b
SSDEEP

24576:NT9umDuCLx2sdAx+3uSWFhBJ8Q0aSqlFl00A1:YMAx+3uSWFhBJ8Q0Ag

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  825e2aa2a216f170473e4d8baf22263821c3fffab1463a518d98638f38d45cc8
- Size
  
  901KB
- MD5
  
  4a40e6f00cd7a2675d2b61963dd83156
- SHA1
  
  00bec3447d337aa0fe734e7585a579298429fdfc
- SHA256
  
  825e2aa2a216f170473e4d8baf22263821c3fffab1463a518d98638f38d45cc8
- SHA512
  
  4416f926902ca04ac7e8b4498740ee00b9b320f79b437f7fe8493af00b4b717259a75e2e72f6d38015b67194f7ac2978487f5caeb9ceee3020c63115ba5feb3b
- SSDEEP
  
  24576:NT9umDuCLx2sdAx+3uSWFhBJ8Q0aSqlFl00A1:YMAx+3uSWFhBJ8Q0Ag
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2