33753f9f9818b29afbbf88cac832364972a56345bdf61e04118440b9cb8e39a8 | Triage

Sharing

General

Target

33753f9f9818b29afbbf88cac832364972a56345bdf61e04118440b9cb8e39a8
Size

96KB
Sample

221107-zveg6shdf5
MD5

08f58c00495cd31e6c374bee28f99d50
SHA1

5776ddcaef316090264e30b8ecf33bd82e01406b
SHA256

33753f9f9818b29afbbf88cac832364972a56345bdf61e04118440b9cb8e39a8
SHA512

47f1e947cad2968962a62e1012de2c6c59e4cf23661f7697a6f5d5fa11ee047965fc45c295bd65ff425a77dc6bdc3b8e4732f06f04e9495d60e925e77af98326
SSDEEP

768:Ndziz355/dlrFpq6pnuER2wrmhDrMjBJMm/uVf1zBmQzTGfmgyqAE:Ndzizv/pQGucHr1jBJRWVf1zwQVgvAE

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  33753f9f9818b29afbbf88cac832364972a56345bdf61e04118440b9cb8e39a8
- Size
  
  96KB
- MD5
  
  08f58c00495cd31e6c374bee28f99d50
- SHA1
  
  5776ddcaef316090264e30b8ecf33bd82e01406b
- SHA256
  
  33753f9f9818b29afbbf88cac832364972a56345bdf61e04118440b9cb8e39a8
- SHA512
  
  47f1e947cad2968962a62e1012de2c6c59e4cf23661f7697a6f5d5fa11ee047965fc45c295bd65ff425a77dc6bdc3b8e4732f06f04e9495d60e925e77af98326
- SSDEEP
  
  768:Ndziz355/dlrFpq6pnuER2wrmhDrMjBJMm/uVf1zBmQzTGfmgyqAE:Ndzizv/pQGucHr1jBJRWVf1zwQVgvAE
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2