9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c | Triage

Sharing

General

Target

9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
Size

98KB
Sample

221129-e9hg6aeh32
MD5

b300cf496ce59525d639c1ec61ca9b5e
SHA1

c9730b434ebb718dd4b354538bf8d8ad55e69e14
SHA256

9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
SHA512

c3935d59473be19441b520c00989c7806f5af2c7c698b23e5a578cf73642f7423036c94320e02c8f43649c0341d4aae5fbeeb4aadd0cce50ab5ec5254eebc950
SSDEEP

1536:vswig1cloTDJbSCjdYkTinq3fkvl0voOFwE0iwe41IQ7xcNcnIAoO4:EPg993Tiq8t0voOSti7KtNIAd4

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
- Size
  
  98KB
- MD5
  
  b300cf496ce59525d639c1ec61ca9b5e
- SHA1
  
  c9730b434ebb718dd4b354538bf8d8ad55e69e14
- SHA256
  
  9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
- SHA512
  
  c3935d59473be19441b520c00989c7806f5af2c7c698b23e5a578cf73642f7423036c94320e02c8f43649c0341d4aae5fbeeb4aadd0cce50ab5ec5254eebc950
- SSDEEP
  
  1536:vswig1cloTDJbSCjdYkTinq3fkvl0voOFwE0iwe41IQ7xcNcnIAoO4:EPg993Tiq8t0voOSti7KtNIAd4
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2