6da0a1b7ebc7ae7ed7dc968869b46597d783f73086540e1ced654c4700accc5e | Triage

Sharing

General

Target

6da0a1b7ebc7ae7ed7dc968869b46597d783f73086540e1ced654c4700accc5e
Size

240KB
Sample

221130-3hgcsaee86
MD5

51a6668cbc673661e830fe1c447c63b3
SHA1

38b27f31d2b16c11d0e7e5ee79e1f475c5662cd9
SHA256

6da0a1b7ebc7ae7ed7dc968869b46597d783f73086540e1ced654c4700accc5e
SHA512

e6c87e3051bda7d8a2053b2035b5147e78a79bb42a00cf509c6f49b51eb4bbf6f7f3ffd15faf8f11f71d95d91d0496d66e679c906ac432b9e2af66601a9d715e
SSDEEP

6144:5731bdBaB1E/K1QwIPOr4NBI9ifr3M9EvwXRe0f3VyEx3b:51bdFtoyr39yvfFHJ

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  6da0a1b7ebc7ae7ed7dc968869b46597d783f73086540e1ced654c4700accc5e
- Size
  
  240KB
- MD5
  
  51a6668cbc673661e830fe1c447c63b3
- SHA1
  
  38b27f31d2b16c11d0e7e5ee79e1f475c5662cd9
- SHA256
  
  6da0a1b7ebc7ae7ed7dc968869b46597d783f73086540e1ced654c4700accc5e
- SHA512
  
  e6c87e3051bda7d8a2053b2035b5147e78a79bb42a00cf509c6f49b51eb4bbf6f7f3ffd15faf8f11f71d95d91d0496d66e679c906ac432b9e2af66601a9d715e
- SSDEEP
  
  6144:5731bdBaB1E/K1QwIPOr4NBI9ifr3M9EvwXRe0f3VyEx3b:51bdFtoyr39yvfFHJ
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2