267c98978966f99796370af05d3395f55e53630a1bed9e632edd85841610a5f9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

267c98978966f99796370af05d3395f55e53630a1bed9e632edd85841610a5f9
Size

30KB
Sample

221030-tg1wcshbg2
MD5

831a012e9e013d259f0a987ff562da6e
SHA1

078ca548b1bdd674851d18a79dd841534cf83fcc
SHA256

267c98978966f99796370af05d3395f55e53630a1bed9e632edd85841610a5f9
SHA512

1e221d15cdadfb1170c9e4384507389e9e12c9e5771421af24de84925047236c3f8dd300a97f042ae523655b9190d504f7a9f4f7801511367a3d21ed2535f183
SSDEEP

768:hU6wHpNgZ6WDcj9XbZz/bqkI3OiBxNUFj:hU6wJNgkVRr9/bxDiBxNUB

Score

8^/10

persistence

Malware Config

Targets

- Target
  
  267c98978966f99796370af05d3395f55e53630a1bed9e632edd85841610a5f9
- Size
  
  30KB
- MD5
  
  831a012e9e013d259f0a987ff562da6e
- SHA1
  
  078ca548b1bdd674851d18a79dd841534cf83fcc
- SHA256
  
  267c98978966f99796370af05d3395f55e53630a1bed9e632edd85841610a5f9
- SHA512
  
  1e221d15cdadfb1170c9e4384507389e9e12c9e5771421af24de84925047236c3f8dd300a97f042ae523655b9190d504f7a9f4f7801511367a3d21ed2535f183
- SSDEEP
  
  768:hU6wHpNgZ6WDcj9XbZz/bqkI3OiBxNUFj:hU6wJNgkVRr9/bxDiBxNUB
Score

8^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2