Overview

overview

10

Static

static

33e5e5ef6e...cd.exe

windows7-x64

10

33e5e5ef6e...cd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd

  • Size

    71KB

  • Sample

    221124-asxtasfc38

  • MD5

    09138294bdc3df7dae367b42983019b1

  • SHA1

    e41444956f80c076fd0a04ae58774a5b55c0ff80

  • SHA256

    33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd

  • SHA512

    6384852dd83c8d71de5d795d3daa2cc1a479627e743c207491fe1a556207b31365b5a9bc25e4e5ec345b48f90175d6fec6a75c68d34f3681e5500dc844070c53

  • SSDEEP

    768:KaCaB044YAHIiSkrzzx0iDTOtMxZI5C8w/f1zBmQzTGfmgyq6zU:1C0OMcamTaWf1zwQVgv6I

Score
10/10
persistence

Malware Config

Targets

    • Target

      33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd

    • Size

      71KB

    • MD5

      09138294bdc3df7dae367b42983019b1

    • SHA1

      e41444956f80c076fd0a04ae58774a5b55c0ff80

    • SHA256

      33e5e5ef6e7c5d80f39abf3ded045aa3b5aa09fd5f129ae8b3909aae2ea701cd

    • SHA512

      6384852dd83c8d71de5d795d3daa2cc1a479627e743c207491fe1a556207b31365b5a9bc25e4e5ec345b48f90175d6fec6a75c68d34f3681e5500dc844070c53

    • SSDEEP

      768:KaCaB044YAHIiSkrzzx0iDTOtMxZI5C8w/f1zBmQzTGfmgyq6zU:1C0OMcamTaWf1zwQVgv6I

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks