a86ca38ecb610befe167fd848434865699dbcb6a4b87b398f88a91aa46275cd1 | Triage

Sharing

General

Target

a86ca38ecb610befe167fd848434865699dbcb6a4b87b398f88a91aa46275cd1
Size

76KB
Sample

221106-jprybaafa8
MD5

2cdac50578731e205c1e96441f1f7720
SHA1

b6e8d91b942ffc7ab0d51a7f35ed10cfd28bd8b7
SHA256

a86ca38ecb610befe167fd848434865699dbcb6a4b87b398f88a91aa46275cd1
SHA512

efd381ccfe8341c8884d6a559d4a228160b4104630317501aee959b499bc0b93eed4545711067db6af383caf4bb764e5cb5a6a21d17c89caceeecb2d791a59af
SSDEEP

1536:FSprrQGRt4QP3pJk/4CV82frKeHMUnJ4TCuNegDle7ZD:FiQGfr/CVLLHF6uuNNg

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  a86ca38ecb610befe167fd848434865699dbcb6a4b87b398f88a91aa46275cd1
- Size
  
  76KB
- MD5
  
  2cdac50578731e205c1e96441f1f7720
- SHA1
  
  b6e8d91b942ffc7ab0d51a7f35ed10cfd28bd8b7
- SHA256
  
  a86ca38ecb610befe167fd848434865699dbcb6a4b87b398f88a91aa46275cd1
- SHA512
  
  efd381ccfe8341c8884d6a559d4a228160b4104630317501aee959b499bc0b93eed4545711067db6af383caf4bb764e5cb5a6a21d17c89caceeecb2d791a59af
- SSDEEP
  
  1536:FSprrQGRt4QP3pJk/4CV82frKeHMUnJ4TCuNegDle7ZD:FiQGfr/CVLLHF6uuNNg
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2