d2ac2b5ba5ae1a6ef66629aba3f05d280cd821cd52000fcae4a9c0ba9aa61f07 | Triage

Sharing

General

Target

d2ac2b5ba5ae1a6ef66629aba3f05d280cd821cd52000fcae4a9c0ba9aa61f07
Size

85KB
Sample

221123-p9s9rsgd8t
MD5

97fa78d4cc3e0540a5d8c8c7bbfe6ff2
SHA1

a91550339c1a480f941873deced95130a8c5b29d
SHA256

d2ac2b5ba5ae1a6ef66629aba3f05d280cd821cd52000fcae4a9c0ba9aa61f07
SHA512

b37e599e83e94454181ba1ed3c3201dafbe49226ca5be51fa357b7fc2b2a32ecba9bf5e570820d671cf70a0d50e290faaf22154d7a8223af6b979d6522c9bacb
SSDEEP

1536:wWxXJQJalDAQyQH3/2nA+oGp1zp3P7q63B6VFX:VBuoDyQX/2A+p1lHx6Vl

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  d2ac2b5ba5ae1a6ef66629aba3f05d280cd821cd52000fcae4a9c0ba9aa61f07
- Size
  
  85KB
- MD5
  
  97fa78d4cc3e0540a5d8c8c7bbfe6ff2
- SHA1
  
  a91550339c1a480f941873deced95130a8c5b29d
- SHA256
  
  d2ac2b5ba5ae1a6ef66629aba3f05d280cd821cd52000fcae4a9c0ba9aa61f07
- SHA512
  
  b37e599e83e94454181ba1ed3c3201dafbe49226ca5be51fa357b7fc2b2a32ecba9bf5e570820d671cf70a0d50e290faaf22154d7a8223af6b979d6522c9bacb
- SSDEEP
  
  1536:wWxXJQJalDAQyQH3/2nA+oGp1zp3P7q63B6VFX:VBuoDyQX/2A+p1lHx6Vl
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2