Overview

overview

10

Static

static

1872828c0c...96.exe

windows7-x64

10

1872828c0c...96.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1872828c0c627a857dc01d2a911b32a8ebf9275cc19dfc75e97a8f061c924896

  • Size

    98KB

  • Sample

    221124-asyetsad91

  • MD5

    268585d593d4b26a643530c7eb39b936

  • SHA1

    97a523835d2ef75c37823d7947f0f32076f9fc7c

  • SHA256

    1872828c0c627a857dc01d2a911b32a8ebf9275cc19dfc75e97a8f061c924896

  • SHA512

    47ac47de7a924eaec2c653a929e1a36f9285e1dbefdf9181bbf5eb31033f593a06d0f3fa134c6f90a8b87c38efece3e285c48cb286aa4e7cade9a5179d792874

  • SSDEEP

    768:ivuqajF8o8RblqU19JBz/7wdMTpOPDpCsf1zBmQjTGfmgyqw:rpM8+l87DpCsf1zwQlgvw

Score
10/10
persistence

Malware Config

Targets

    • Target

      1872828c0c627a857dc01d2a911b32a8ebf9275cc19dfc75e97a8f061c924896

    • Size

      98KB

    • MD5

      268585d593d4b26a643530c7eb39b936

    • SHA1

      97a523835d2ef75c37823d7947f0f32076f9fc7c

    • SHA256

      1872828c0c627a857dc01d2a911b32a8ebf9275cc19dfc75e97a8f061c924896

    • SHA512

      47ac47de7a924eaec2c653a929e1a36f9285e1dbefdf9181bbf5eb31033f593a06d0f3fa134c6f90a8b87c38efece3e285c48cb286aa4e7cade9a5179d792874

    • SSDEEP

      768:ivuqajF8o8RblqU19JBz/7wdMTpOPDpCsf1zBmQjTGfmgyqw:rpM8+l87DpCsf1zwQlgvw

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks