ef3261aa92dca111b8efe7f374d16f6cef97cd32a6cc48b56494bc3582ab0f31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef3261aa92dca111b8efe7f374d16f6cef97cd32a6cc48b56494bc3582ab0f31
Size

1.4MB
Sample

221107-t7sbxaaeek
MD5

0eda35d48e83a81b975bd3a7ede5c31b
SHA1

cff43529966b29b25ffc9c98b7dc63ac339ad1a4
SHA256

ef3261aa92dca111b8efe7f374d16f6cef97cd32a6cc48b56494bc3582ab0f31
SHA512

b56d123ed1229d3e532bd6f7c63c7ecc6ebaf2c60b74586683e64ea105a265a6dc575c14046d922fa908eb0824d9658fb714df2f5647bdb17e4b8542a5e8a802
SSDEEP

768:4pXTnMD4owDzVMAW1WXaQ+0qCPi5Et6GIf1zBmQzTGfmgyq/FU:UXTSHQ+AWwXpPhttIf1zwQVgv/

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  ef3261aa92dca111b8efe7f374d16f6cef97cd32a6cc48b56494bc3582ab0f31
- Size
  
  1.4MB
- MD5
  
  0eda35d48e83a81b975bd3a7ede5c31b
- SHA1
  
  cff43529966b29b25ffc9c98b7dc63ac339ad1a4
- SHA256
  
  ef3261aa92dca111b8efe7f374d16f6cef97cd32a6cc48b56494bc3582ab0f31
- SHA512
  
  b56d123ed1229d3e532bd6f7c63c7ecc6ebaf2c60b74586683e64ea105a265a6dc575c14046d922fa908eb0824d9658fb714df2f5647bdb17e4b8542a5e8a802
- SSDEEP
  
  768:4pXTnMD4owDzVMAW1WXaQ+0qCPi5Et6GIf1zBmQzTGfmgyq/FU:UXTSHQ+AWwXpPhttIf1zwQVgv/
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2