7dd39df901bddc1e5aea804791e39937f19e2572ce8f512fe6604de248a40c6d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7dd39df901bddc1e5aea804791e39937f19e2572ce8f512fe6604de248a40c6d
Size

297KB
Sample

221201-2dl7ssbe8w
MD5

17c5a17d7d2b9ee5c175867d14454804
SHA1

15f4527a601194920d95426e5130995364e941db
SHA256

7dd39df901bddc1e5aea804791e39937f19e2572ce8f512fe6604de248a40c6d
SHA512

4a6cb9d2d77b08717982cf0ffc9241989b7d7448c7a1cb083c3ab6f83cf20aa554b36de87ed6608868c13b5b3413c0c934e31d580e5967ff16d1311cab213e1d
SSDEEP

6144:VTuYP5Hghu5xDemuPJ0DmL8c6HEVIvz7OSoRjZUacH/8dckgT9Kv:VTuUWhOTK0DmqkeWSohnUUdczk

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  7dd39df901bddc1e5aea804791e39937f19e2572ce8f512fe6604de248a40c6d
- Size
  
  297KB
- MD5
  
  17c5a17d7d2b9ee5c175867d14454804
- SHA1
  
  15f4527a601194920d95426e5130995364e941db
- SHA256
  
  7dd39df901bddc1e5aea804791e39937f19e2572ce8f512fe6604de248a40c6d
- SHA512
  
  4a6cb9d2d77b08717982cf0ffc9241989b7d7448c7a1cb083c3ab6f83cf20aa554b36de87ed6608868c13b5b3413c0c934e31d580e5967ff16d1311cab213e1d
- SSDEEP
  
  6144:VTuYP5Hghu5xDemuPJ0DmL8c6HEVIvz7OSoRjZUacH/8dckgT9Kv:VTuUWhOTK0DmqkeWSohnUUdczk
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2