Overview

overview

10

Static

static

e7621a37d9...f9.exe

windows7-x64

10

e7621a37d9...f9.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e7621a37d91c4b12455b7b0973a29e27d922d58c56dc9db3698af602c4213cf9

  • Size

    71KB

  • Sample

    221124-axkdrsag6w

  • MD5

    1ef535b5f1c8ec216018a9f5ff8422e6

  • SHA1

    b8d69ea9b09d901bc304a3fd67980aebb397cfd0

  • SHA256

    e7621a37d91c4b12455b7b0973a29e27d922d58c56dc9db3698af602c4213cf9

  • SHA512

    67476fd8b04285e53fc9d021df5599782cbe5cf5fbe0887757d48277458941669cd5fa059d45aa2dbcb2e35b2a5da7120654e3dfab28d5a278407d5a697626f7

  • SSDEEP

    1536:4eGyK7vFSgnn10QjVBLi5uUquDpxZf1zwQVgvUwU:4BjvFdbVo5uqpxp1zwLvUp

Score
10/10
persistence

Malware Config

Targets

    • Target

      e7621a37d91c4b12455b7b0973a29e27d922d58c56dc9db3698af602c4213cf9

    • Size

      71KB

    • MD5

      1ef535b5f1c8ec216018a9f5ff8422e6

    • SHA1

      b8d69ea9b09d901bc304a3fd67980aebb397cfd0

    • SHA256

      e7621a37d91c4b12455b7b0973a29e27d922d58c56dc9db3698af602c4213cf9

    • SHA512

      67476fd8b04285e53fc9d021df5599782cbe5cf5fbe0887757d48277458941669cd5fa059d45aa2dbcb2e35b2a5da7120654e3dfab28d5a278407d5a697626f7

    • SSDEEP

      1536:4eGyK7vFSgnn10QjVBLi5uUquDpxZf1zwQVgvUwU:4BjvFdbVo5uqpxp1zwLvUp

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks