a4203b4ac98d5170e929f50b0c01eeda1b0486cacdb037147a39db743d8e0973 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4203b4ac98d5170e929f50b0c01eeda1b0486cacdb037147a39db743d8e0973
Size

256KB
Sample

221129-enwgwsge9t
MD5

38b6ce23695542592ce3724a17cf929f
SHA1

f51542a882c9e71c25c82093bed1bec0ce1b9937
SHA256

a4203b4ac98d5170e929f50b0c01eeda1b0486cacdb037147a39db743d8e0973
SHA512

2f1be053cc2eff0f427328352c0cc9d0c5e6570920e634a554fb2231061d62fb1266f476b3ab0da13c4202ecbdb915f45dfd5340e339d60b21ad090ac767bc9d
SSDEEP

6144:OV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:wUwRd0z/Op1T+xk4hut95fM

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  a4203b4ac98d5170e929f50b0c01eeda1b0486cacdb037147a39db743d8e0973
- Size
  
  256KB
- MD5
  
  38b6ce23695542592ce3724a17cf929f
- SHA1
  
  f51542a882c9e71c25c82093bed1bec0ce1b9937
- SHA256
  
  a4203b4ac98d5170e929f50b0c01eeda1b0486cacdb037147a39db743d8e0973
- SHA512
  
  2f1be053cc2eff0f427328352c0cc9d0c5e6570920e634a554fb2231061d62fb1266f476b3ab0da13c4202ecbdb915f45dfd5340e339d60b21ad090ac767bc9d
- SSDEEP
  
  6144:OV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:wUwRd0z/Op1T+xk4hut95fM
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2