e7776c937ab36c2ffff5bb163d52f3616312dd8faf9000e54692a3b53ae68a61 | Triage

Sharing

General

Target

e7776c937ab36c2ffff5bb163d52f3616312dd8faf9000e54692a3b53ae68a61
Size

128KB
Sample

221107-sz6c5agcbk
MD5

050772e7e4f9e313fb27c980fbab592c
SHA1

bd744ff449106ccba5771522cc62850d558e7401
SHA256

e7776c937ab36c2ffff5bb163d52f3616312dd8faf9000e54692a3b53ae68a61
SHA512

b0d3535ef82d8f76abbabebe3910af4748d15db7497f3739b00cf4e13fed0fe99475dc71e4286efd6220b5d7b10ece96d8842e97b02fe2e7fb194482b8b919df
SSDEEP

3072:51B31bdBob2QXYIBX9NHOQlEgL5HQb4rZTg6:5731bdBaB/jOQl/dwbGb

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  e7776c937ab36c2ffff5bb163d52f3616312dd8faf9000e54692a3b53ae68a61
- Size
  
  128KB
- MD5
  
  050772e7e4f9e313fb27c980fbab592c
- SHA1
  
  bd744ff449106ccba5771522cc62850d558e7401
- SHA256
  
  e7776c937ab36c2ffff5bb163d52f3616312dd8faf9000e54692a3b53ae68a61
- SHA512
  
  b0d3535ef82d8f76abbabebe3910af4748d15db7497f3739b00cf4e13fed0fe99475dc71e4286efd6220b5d7b10ece96d8842e97b02fe2e7fb194482b8b919df
- SSDEEP
  
  3072:51B31bdBob2QXYIBX9NHOQlEgL5HQb4rZTg6:5731bdBaB/jOQl/dwbGb
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2