78ede33b759d1a160f470d89f38bbb70acc0d7d99039b624d7ca6118a1dce343 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78ede33b759d1a160f470d89f38bbb70acc0d7d99039b624d7ca6118a1dce343
Size

63KB
Sample

221029-b3m8aafee4
MD5

0dc8f1875e921d8f94997d840e7feef0
SHA1

40ae4542402eba596b617e722b863ab0d7caf11b
SHA256

78ede33b759d1a160f470d89f38bbb70acc0d7d99039b624d7ca6118a1dce343
SHA512

08979407e390435f165d35e059933c6b7e60b16b2615580b7d432e4d623b6bd59fff40336e0eb5dc1366f4cf4a5a8c77aab0fe3c1792e80ef620c00d1b9d7c0d
SSDEEP

768:S+aiqH1sziGJLL6iiaGNZ7KmA2UMSwBfNrGxnT0BrjqstFiwADKakU1erbQ1JaGz:JaiqH1s+kCtrA2UMT0mTFibDKa1Xm4L

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  78ede33b759d1a160f470d89f38bbb70acc0d7d99039b624d7ca6118a1dce343
- Size
  
  63KB
- MD5
  
  0dc8f1875e921d8f94997d840e7feef0
- SHA1
  
  40ae4542402eba596b617e722b863ab0d7caf11b
- SHA256
  
  78ede33b759d1a160f470d89f38bbb70acc0d7d99039b624d7ca6118a1dce343
- SHA512
  
  08979407e390435f165d35e059933c6b7e60b16b2615580b7d432e4d623b6bd59fff40336e0eb5dc1366f4cf4a5a8c77aab0fe3c1792e80ef620c00d1b9d7c0d
- SSDEEP
  
  768:S+aiqH1sziGJLL6iiaGNZ7KmA2UMSwBfNrGxnT0BrjqstFiwADKakU1erbQ1JaGz:JaiqH1s+kCtrA2UMT0mTFibDKa1Xm4L
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2