80a0e3d19e0f7ae8c24494d788a3d028e9918593530259193ae60d30ad65846a | Triage

Sharing

General

Target

80a0e3d19e0f7ae8c24494d788a3d028e9918593530259193ae60d30ad65846a
Size

88KB
Sample

221020-mgxelshdgq
MD5

96ab5aa98ec576c20a58598901f54c60
SHA1

c0888e27d9c5d73e20d1c27549e7f65d324ce281
SHA256

80a0e3d19e0f7ae8c24494d788a3d028e9918593530259193ae60d30ad65846a
SHA512

ecbdae86d630c3314f2cca8b5975fefa1cda84f33912518397211a18c1de549e9ad03f94f4eaf97c782616066ee32b9d0f98bae0bc7ccc67eed28683e91cf13a
SSDEEP

768:3vuqajF8o8RblqU19JBz/7wdMTpOPDpCsf1zBmQzTGfmgyqw:upM8+l87DpCsf1zwQVgvw

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  80a0e3d19e0f7ae8c24494d788a3d028e9918593530259193ae60d30ad65846a
- Size
  
  88KB
- MD5
  
  96ab5aa98ec576c20a58598901f54c60
- SHA1
  
  c0888e27d9c5d73e20d1c27549e7f65d324ce281
- SHA256
  
  80a0e3d19e0f7ae8c24494d788a3d028e9918593530259193ae60d30ad65846a
- SHA512
  
  ecbdae86d630c3314f2cca8b5975fefa1cda84f33912518397211a18c1de549e9ad03f94f4eaf97c782616066ee32b9d0f98bae0bc7ccc67eed28683e91cf13a
- SSDEEP
  
  768:3vuqajF8o8RblqU19JBz/7wdMTpOPDpCsf1zBmQzTGfmgyqw:upM8+l87DpCsf1zwQVgvw
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2