Overview

overview

10

Static

static

9b93fd12e0...dd.exe

windows7-x64

10

9b93fd12e0...dd.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    9b93fd12e062c8c8174db5d7b2cce41ae983ef051f4cf0609c33b9fca7fb62dd

  • Size

    345KB

  • Sample

    221126-kx8rgaff29

  • MD5

    9d2120ce9ca328c0aec13b7cc0512c4f

  • SHA1

    f1f187c35c7b062815572fa41aa63260d614bc88

  • SHA256

    9b93fd12e062c8c8174db5d7b2cce41ae983ef051f4cf0609c33b9fca7fb62dd

  • SHA512

    45f699ff77eef4cdba3ef216b92edc09a42ea4c3cca841a3b77a869da5d91ac19b225f336838a301512e0f9d125fd3ba6deb71e1efcc1e789542bc53b8a05ada

  • SSDEEP

    3072:NQ0mCO91VxjITYne3dajL25zoI7h+aS1Gn:JmCO91VxjoYe3cOzo0naG

Score
10/10
persistence

Malware Config

Targets

    • Target

      9b93fd12e062c8c8174db5d7b2cce41ae983ef051f4cf0609c33b9fca7fb62dd

    • Size

      345KB

    • MD5

      9d2120ce9ca328c0aec13b7cc0512c4f

    • SHA1

      f1f187c35c7b062815572fa41aa63260d614bc88

    • SHA256

      9b93fd12e062c8c8174db5d7b2cce41ae983ef051f4cf0609c33b9fca7fb62dd

    • SHA512

      45f699ff77eef4cdba3ef216b92edc09a42ea4c3cca841a3b77a869da5d91ac19b225f336838a301512e0f9d125fd3ba6deb71e1efcc1e789542bc53b8a05ada

    • SSDEEP

      3072:NQ0mCO91VxjITYne3dajL25zoI7h+aS1Gn:JmCO91VxjoYe3cOzo0naG

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks