a3d4e0ce0b5583d94677131be80a4d83ef4baba9f4e89e610840e9903ff100b1 | Triage

Sharing

General

Target

a3d4e0ce0b5583d94677131be80a4d83ef4baba9f4e89e610840e9903ff100b1
Size

243KB
Sample

221129-ep2ejagf6t
MD5

97a508f2b6823ec2818259c64ff56c8c
SHA1

3096fcdec8cceea94086843267e33ab78b1326e1
SHA256

a3d4e0ce0b5583d94677131be80a4d83ef4baba9f4e89e610840e9903ff100b1
SHA512

957d7fdd89b63628e2f0f489a8d34d4e9af7879021ac201cb736153816a0724416e4eef445392a432c2d9ebf4d8a2f4e14a8f2aad2f57742ae6c6e9546f44c01
SSDEEP

6144:TnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:VTKCS2sjWC1rfd/Rtqc7HqkYh

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  a3d4e0ce0b5583d94677131be80a4d83ef4baba9f4e89e610840e9903ff100b1
- Size
  
  243KB
- MD5
  
  97a508f2b6823ec2818259c64ff56c8c
- SHA1
  
  3096fcdec8cceea94086843267e33ab78b1326e1
- SHA256
  
  a3d4e0ce0b5583d94677131be80a4d83ef4baba9f4e89e610840e9903ff100b1
- SHA512
  
  957d7fdd89b63628e2f0f489a8d34d4e9af7879021ac201cb736153816a0724416e4eef445392a432c2d9ebf4d8a2f4e14a8f2aad2f57742ae6c6e9546f44c01
- SSDEEP
  
  6144:TnScTKd/ASzisjWzxCyEBQFyTrfdiaXuQtqc7YKqkYh:VTKCS2sjWC1rfd/Rtqc7HqkYh
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2