366ecc61a355db00a65b19be026f4e7cfb44b1e43cfba7d9cbb8fccc7c664895 | Triage

Sharing

General

Target

366ecc61a355db00a65b19be026f4e7cfb44b1e43cfba7d9cbb8fccc7c664895
Size

104KB
Sample

221106-k8azksdda4
MD5

3e238d95c62da768236bbdabdc9822f0
SHA1

796f85695ff07164236220f4c3c88843c2e9b0ac
SHA256

366ecc61a355db00a65b19be026f4e7cfb44b1e43cfba7d9cbb8fccc7c664895
SHA512

4be22540854b62e6e65b1b8ba40a1fac6f13c0ab838c464f776b511cf2efeaeb9632dab4297e84289998103b891b9e9233d47fc861687d0c17b1e15cf1cbaec9
SSDEEP

1536:KDQpQ5EP0Ajn54Mu+owNjfyBj4FRf8FAKFm9bIabXo7b1jXssG8WXYv:aQIq54M9oEjKBj4z0mBIGXEhXs

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  366ecc61a355db00a65b19be026f4e7cfb44b1e43cfba7d9cbb8fccc7c664895
- Size
  
  104KB
- MD5
  
  3e238d95c62da768236bbdabdc9822f0
- SHA1
  
  796f85695ff07164236220f4c3c88843c2e9b0ac
- SHA256
  
  366ecc61a355db00a65b19be026f4e7cfb44b1e43cfba7d9cbb8fccc7c664895
- SHA512
  
  4be22540854b62e6e65b1b8ba40a1fac6f13c0ab838c464f776b511cf2efeaeb9632dab4297e84289998103b891b9e9233d47fc861687d0c17b1e15cf1cbaec9
- SSDEEP
  
  1536:KDQpQ5EP0Ajn54Mu+owNjfyBj4FRf8FAKFm9bIabXo7b1jXssG8WXYv:aQIq54M9oEjKBj4z0mBIGXEhXs
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2