455262e44199acda0f14f8625da2dcb05b683dea94ac7174167c50f7eed32e74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

455262e44199acda0f14f8625da2dcb05b683dea94ac7174167c50f7eed32e74
Size

500KB
Sample

221130-3hhkvaee89
MD5

03be5277accfe5a0f5a10f5e0f341313
SHA1

5608a6aac40795831f6c27c341e8c67645605a28
SHA256

455262e44199acda0f14f8625da2dcb05b683dea94ac7174167c50f7eed32e74
SHA512

2b01691e7adf787835e48084e16fca770ba71a018ab6d9b2b66f73eeeba54e94f803e59e4f0d083c37ccb579b8bc0a8af6f4698a07f0db87424c0a64e2916991
SSDEEP

12288:N1bArjO/iGeniDJvxJmxycsqLSNIqycPdQ:N1bArYiGeniDpx1cdLSN6cPO

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  455262e44199acda0f14f8625da2dcb05b683dea94ac7174167c50f7eed32e74
- Size
  
  500KB
- MD5
  
  03be5277accfe5a0f5a10f5e0f341313
- SHA1
  
  5608a6aac40795831f6c27c341e8c67645605a28
- SHA256
  
  455262e44199acda0f14f8625da2dcb05b683dea94ac7174167c50f7eed32e74
- SHA512
  
  2b01691e7adf787835e48084e16fca770ba71a018ab6d9b2b66f73eeeba54e94f803e59e4f0d083c37ccb579b8bc0a8af6f4698a07f0db87424c0a64e2916991
- SSDEEP
  
  12288:N1bArjO/iGeniDJvxJmxycsqLSNIqycPdQ:N1bArYiGeniDpx1cdLSN6cPO
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2