a21ee9805b4ffa9f42b2b895ce5b2e7432b37ffda87ca1bda3995ecae0fdcb23 | Triage

Sharing

General

Target

a21ee9805b4ffa9f42b2b895ce5b2e7432b37ffda87ca1bda3995ecae0fdcb23
Size

269KB
Sample

221201-y4na1age72
MD5

481518e42dc8d2c28d72be2582ce5a86
SHA1

7dfc041e74b02e4941ce548199a497443a9aa1b7
SHA256

a21ee9805b4ffa9f42b2b895ce5b2e7432b37ffda87ca1bda3995ecae0fdcb23
SHA512

3d32cadf8e5289c132f8bd16a739fb4e09cde9d198fc2dd596a67dd17491624e812d2d1f417d00621c97e1da034196d355501d019190c5fd82d8f196b08795b1
SSDEEP

6144:8Bv99HElTc923+7UOJQmMaqy8iyCjOBRh:W9x0Tc9UUBM2DjK

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  a21ee9805b4ffa9f42b2b895ce5b2e7432b37ffda87ca1bda3995ecae0fdcb23
- Size
  
  269KB
- MD5
  
  481518e42dc8d2c28d72be2582ce5a86
- SHA1
  
  7dfc041e74b02e4941ce548199a497443a9aa1b7
- SHA256
  
  a21ee9805b4ffa9f42b2b895ce5b2e7432b37ffda87ca1bda3995ecae0fdcb23
- SHA512
  
  3d32cadf8e5289c132f8bd16a739fb4e09cde9d198fc2dd596a67dd17491624e812d2d1f417d00621c97e1da034196d355501d019190c5fd82d8f196b08795b1
- SSDEEP
  
  6144:8Bv99HElTc923+7UOJQmMaqy8iyCjOBRh:W9x0Tc9UUBM2DjK
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2