6edab9b58c0aecbc194e6fa1328454ab45fc88a499873d53a01d138b8a073272 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6edab9b58c0aecbc194e6fa1328454ab45fc88a499873d53a01d138b8a073272
Size

261KB
Sample

221107-pna63afeh3
MD5

05888d7de0bae18200f8f32fbdd9d690
SHA1

a670b67c7fc79627b3fd7e5ce711948c4fa8b4a5
SHA256

6edab9b58c0aecbc194e6fa1328454ab45fc88a499873d53a01d138b8a073272
SHA512

2dc31d072265dc9dd549bf8230c457912fea25959cf98a343cab3c95d661b3c544359843cc22a055998b9ca3069b4db74c5d3b898ca754570044acbb9ea37a78
SSDEEP

6144:bayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:fCua88SEjbEwvpZBZQfZhh

Score

10^/10

persistence upx

Malware Config

Targets

- Target
  
  6edab9b58c0aecbc194e6fa1328454ab45fc88a499873d53a01d138b8a073272
- Size
  
  261KB
- MD5
  
  05888d7de0bae18200f8f32fbdd9d690
- SHA1
  
  a670b67c7fc79627b3fd7e5ce711948c4fa8b4a5
- SHA256
  
  6edab9b58c0aecbc194e6fa1328454ab45fc88a499873d53a01d138b8a073272
- SHA512
  
  2dc31d072265dc9dd549bf8230c457912fea25959cf98a343cab3c95d661b3c544359843cc22a055998b9ca3069b4db74c5d3b898ca754570044acbb9ea37a78
- SSDEEP
  
  6144:bayqTuLw5F88SgCpsS1EbAD7im4vpDVL7RQQZQf6KAe8ihh:fCua88SEjbEwvpZBZQfZhh
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2