33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd | Triage

Sharing

General

Target

33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd
Size

71KB
Sample

221124-asxtasfc38
MD5

09138294bdc3df7dae367b42983019b1
SHA1

e41444956f80c076fd0a04ae58774a5b55c0ff80
SHA256

33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd
SHA512

6384852dd83c8d71de5d795d3daa2cc1a479627e743c207491fe1a556207b31365b5a9bc25e4e5ec345b48f90175d6fec6a75c68d34f3681e5500dc844070c53
SSDEEP

768:KaCaB044YAHIiSkrzzx0iDTOtMxZI5C8w/f1zBmQzTGfmgyq6zU:1C0OMcamTaWf1zwQVgv6I

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd
- Size
  
  71KB
- MD5
  
  09138294bdc3df7dae367b42983019b1
- SHA1
  
  e41444956f80c076fd0a04ae58774a5b55c0ff80
- SHA256
  
  33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd
- SHA512
  
  6384852dd83c8d71de5d795d3daa2cc1a479627e743c207491fe1a556207b31365b5a9bc25e4e5ec345b48f90175d6fec6a75c68d34f3681e5500dc844070c53
- SSDEEP
  
  768:KaCaB044YAHIiSkrzzx0iDTOtMxZI5C8w/f1zBmQzTGfmgyq6zU:1C0OMcamTaWf1zwQVgv6I
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2