56e18760f64995f8aaa0ace9b2934c31ba5d701ba29ffdbdee4ab785c0006cd1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56e18760f64995f8aaa0ace9b2934c31ba5d701ba29ffdbdee4ab785c0006cd1
Size

256KB
Sample

221029-2lgx2sagdr
MD5

850d2ae86c2c853f706478fc432b0b70
SHA1

784654ddb7d80c6bf15a92166f74c4c4ef67ea22
SHA256

56e18760f64995f8aaa0ace9b2934c31ba5d701ba29ffdbdee4ab785c0006cd1
SHA512

f9ddad4a1303218f624041546649223f577b47d690af0217510b73b31cc84028caa911fa55edd9a362b9b02dd09ccc1736a5a69e305b2b357fce5dc3435a769a
SSDEEP

6144:MV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:eUwRd0z/Op1T+xk4hut95fM

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  56e18760f64995f8aaa0ace9b2934c31ba5d701ba29ffdbdee4ab785c0006cd1
- Size
  
  256KB
- MD5
  
  850d2ae86c2c853f706478fc432b0b70
- SHA1
  
  784654ddb7d80c6bf15a92166f74c4c4ef67ea22
- SHA256
  
  56e18760f64995f8aaa0ace9b2934c31ba5d701ba29ffdbdee4ab785c0006cd1
- SHA512
  
  f9ddad4a1303218f624041546649223f577b47d690af0217510b73b31cc84028caa911fa55edd9a362b9b02dd09ccc1736a5a69e305b2b357fce5dc3435a769a
- SSDEEP
  
  6144:MV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:eUwRd0z/Op1T+xk4hut95fM
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2