df387bd1d2d554dd0e44d283de11c67498f7f7ceae908bbb59175afea575b3bf | Triage

Sharing

General

Target

df387bd1d2d554dd0e44d283de11c67498f7f7ceae908bbb59175afea575b3bf
Size

246KB
Sample

221201-lapkradg68
MD5

c7d9058fdbc692812487b955d143afdf
SHA1

71a523c4b60e1da96240ab3fa666924bc78a7ad5
SHA256

df387bd1d2d554dd0e44d283de11c67498f7f7ceae908bbb59175afea575b3bf
SHA512

8ead623e139ecaf497a4bb7fd17c35ecb4ef84d97e68a4a6edd2d8262ef28547778e00fb4eead7bb4a513487044a055b5b1c0eeb71a6c84049e706bedfb7ab75
SSDEEP

6144:ih/W35vSV6Bui97AdB+xgf7Oy7tJlL3aVXGT2p3wZWv:JJv6i976HfN7rl2VXPp3E

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  df387bd1d2d554dd0e44d283de11c67498f7f7ceae908bbb59175afea575b3bf
- Size
  
  246KB
- MD5
  
  c7d9058fdbc692812487b955d143afdf
- SHA1
  
  71a523c4b60e1da96240ab3fa666924bc78a7ad5
- SHA256
  
  df387bd1d2d554dd0e44d283de11c67498f7f7ceae908bbb59175afea575b3bf
- SHA512
  
  8ead623e139ecaf497a4bb7fd17c35ecb4ef84d97e68a4a6edd2d8262ef28547778e00fb4eead7bb4a513487044a055b5b1c0eeb71a6c84049e706bedfb7ab75
- SSDEEP
  
  6144:ih/W35vSV6Bui97AdB+xgf7Oy7tJlL3aVXGT2p3wZWv:JJv6i976HfN7rl2VXPp3E
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2