84ff1b1f78332a2714a56b467b9753bb702c03c0cf7141adb59edf9df18779c7 | Triage

Sharing

General

Target

84ff1b1f78332a2714a56b467b9753bb702c03c0cf7141adb59edf9df18779c7
Size

252KB
Sample

221201-1rmj2sec35
MD5

453b5c020aae4c4c462f6e5ef9368ab4
SHA1

c224629a77acfd67265b871b70a3cfa3fb733017
SHA256

84ff1b1f78332a2714a56b467b9753bb702c03c0cf7141adb59edf9df18779c7
SHA512

1c716680f2cda27b2ef22be9434ffa2936858c47cbe93351da33c218f568b0fd6a8ed065fa45609a4612206bc3e70ad58f8d74cff1cf649c378f34c2ac628e4b
SSDEEP

6144:sQD4XHdswgWD5ddyd58tcFFDsdglLE2Syugbby:9D4XH+4ydCeFFsdGLJBC

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  84ff1b1f78332a2714a56b467b9753bb702c03c0cf7141adb59edf9df18779c7
- Size
  
  252KB
- MD5
  
  453b5c020aae4c4c462f6e5ef9368ab4
- SHA1
  
  c224629a77acfd67265b871b70a3cfa3fb733017
- SHA256
  
  84ff1b1f78332a2714a56b467b9753bb702c03c0cf7141adb59edf9df18779c7
- SHA512
  
  1c716680f2cda27b2ef22be9434ffa2936858c47cbe93351da33c218f568b0fd6a8ed065fa45609a4612206bc3e70ad58f8d74cff1cf649c378f34c2ac628e4b
- SSDEEP
  
  6144:sQD4XHdswgWD5ddyd58tcFFDsdglLE2Syugbby:9D4XH+4ydCeFFsdGLJBC
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2