8ed429b289646fe25aec1554ffa72a9eb9ebae8f06ab38f849d34c9afd4d96e4 | Triage

Sharing

General

Target

8ed429b289646fe25aec1554ffa72a9eb9ebae8f06ab38f849d34c9afd4d96e4
Size

23KB
Sample

221107-nxl49agfbl
MD5

08b258d89a1438b418bbd185292f51e3
SHA1

92bc28160d66cf8aae5f59039be42e9d82bff698
SHA256

8ed429b289646fe25aec1554ffa72a9eb9ebae8f06ab38f849d34c9afd4d96e4
SHA512

a5bd7a29604dbd99bacd64332d7001539ab4086ca6721377451935130df81e35c5c0a3613f41a57329553dc193199122952b83b81af6ca33b3f44f6685d18b3b
SSDEEP

384:c9pFjVSoZRDg+wqvlIqOaM20an/KFv8WUX/14yKxg97Xo2+z4wS+mR3s:c9zjVhLRrMha/K18T/14Vxg9or/dm

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  8ed429b289646fe25aec1554ffa72a9eb9ebae8f06ab38f849d34c9afd4d96e4
- Size
  
  23KB
- MD5
  
  08b258d89a1438b418bbd185292f51e3
- SHA1
  
  92bc28160d66cf8aae5f59039be42e9d82bff698
- SHA256
  
  8ed429b289646fe25aec1554ffa72a9eb9ebae8f06ab38f849d34c9afd4d96e4
- SHA512
  
  a5bd7a29604dbd99bacd64332d7001539ab4086ca6721377451935130df81e35c5c0a3613f41a57329553dc193199122952b83b81af6ca33b3f44f6685d18b3b
- SSDEEP
  
  384:c9pFjVSoZRDg+wqvlIqOaM20an/KFv8WUX/14yKxg97Xo2+z4wS+mR3s:c9zjVhLRrMha/K18T/14Vxg9or/dm
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2