11584ee2e8367c3785da384ce0938e7a1fba1d4504531e92dc29c197e797f8f5 | Triage

Sharing

General

Target

11584ee2e8367c3785da384ce0938e7a1fba1d4504531e92dc29c197e797f8f5
Size

73KB
Sample

221106-lpghpagebn
MD5

306a7c218b027e5fdd0f967b2c58cb80
SHA1

dda8b6753a4e344a2a157788f07a2bbb230152f2
SHA256

11584ee2e8367c3785da384ce0938e7a1fba1d4504531e92dc29c197e797f8f5
SHA512

b7c484d1102c0cf963ba8932f23d47dc6521350964522ff9ad7411ebb0f1d57bb9d4b3e244870f0214cf97edd7b9bfaaee8d1227dcd93a51e2c7933fc2cfb4b5
SSDEEP

1536:PxU+sxSinUeZGRm/G7h9T/10m3SQk9EhB:P5YSIUmGmu7h9z10m3SQk9Eh

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  11584ee2e8367c3785da384ce0938e7a1fba1d4504531e92dc29c197e797f8f5
- Size
  
  73KB
- MD5
  
  306a7c218b027e5fdd0f967b2c58cb80
- SHA1
  
  dda8b6753a4e344a2a157788f07a2bbb230152f2
- SHA256
  
  11584ee2e8367c3785da384ce0938e7a1fba1d4504531e92dc29c197e797f8f5
- SHA512
  
  b7c484d1102c0cf963ba8932f23d47dc6521350964522ff9ad7411ebb0f1d57bb9d4b3e244870f0214cf97edd7b9bfaaee8d1227dcd93a51e2c7933fc2cfb4b5
- SSDEEP
  
  1536:PxU+sxSinUeZGRm/G7h9T/10m3SQk9EhB:P5YSIUmGmu7h9z10m3SQk9Eh
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2