07616acc1468589d4d97026d371defb9287425b4f35bf2783c2e00c8ee0690c6 | Triage

Sharing

General

Target

07616acc1468589d4d97026d371defb9287425b4f35bf2783c2e00c8ee0690c6
Size

571KB
Sample

221123-xmasxafd63
MD5

547927e02475a3a876c1a7b99406ab79
SHA1

022a2e0d771c62296116594277e9d8d0ee5a85af
SHA256

07616acc1468589d4d97026d371defb9287425b4f35bf2783c2e00c8ee0690c6
SHA512

4b412f117bcd04c3c7115fabe909bd593bf80737902a24c17df08785d89b5bd3ba857e3d405f6270464c9432e06aa7923b8f67a8d4ba59a8ccfa9e4889166f17
SSDEEP

1536:dhyZdNyXtc+UonvsWFtk0Ff1zwQVgvfW2Ixr8BiU:dinz+LkKR11zwLvfBioN

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  07616acc1468589d4d97026d371defb9287425b4f35bf2783c2e00c8ee0690c6
- Size
  
  571KB
- MD5
  
  547927e02475a3a876c1a7b99406ab79
- SHA1
  
  022a2e0d771c62296116594277e9d8d0ee5a85af
- SHA256
  
  07616acc1468589d4d97026d371defb9287425b4f35bf2783c2e00c8ee0690c6
- SHA512
  
  4b412f117bcd04c3c7115fabe909bd593bf80737902a24c17df08785d89b5bd3ba857e3d405f6270464c9432e06aa7923b8f67a8d4ba59a8ccfa9e4889166f17
- SSDEEP
  
  1536:dhyZdNyXtc+UonvsWFtk0Ff1zwQVgvfW2Ixr8BiU:dinz+LkKR11zwLvfBioN
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2