ddf6a5645ed14a4311a4430e5ee3cfe043ef8dcccdd84d968683158cff5a414e | Triage

Sharing

General

Target

ddf6a5645ed14a4311a4430e5ee3cfe043ef8dcccdd84d968683158cff5a414e
Size

301KB
Sample

221203-eajk6sfa8s
MD5

8f8f2312a4622e8440f29d3e10395931
SHA1

26062a8430cb0fb31d1d1d93c8353d5946f6498d
SHA256

ddf6a5645ed14a4311a4430e5ee3cfe043ef8dcccdd84d968683158cff5a414e
SHA512

547970c90bf21b02b25fd00167e5e056250c81bcacfade323f4333ac3d3bc0262a1c41a770196e4a668b7eee172c21e8629b7f2660292496add63720a3dcaf0a
SSDEEP

6144:YhMFV++TJ6wC7XK/AqxDc40XFjkc3cCbw4U4l3cnV0ZAvRDVb+pB7Z7:YhEVT/AqxA40XDbq49cnV0ZyRDVypf7

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  ddf6a5645ed14a4311a4430e5ee3cfe043ef8dcccdd84d968683158cff5a414e
- Size
  
  301KB
- MD5
  
  8f8f2312a4622e8440f29d3e10395931
- SHA1
  
  26062a8430cb0fb31d1d1d93c8353d5946f6498d
- SHA256
  
  ddf6a5645ed14a4311a4430e5ee3cfe043ef8dcccdd84d968683158cff5a414e
- SHA512
  
  547970c90bf21b02b25fd00167e5e056250c81bcacfade323f4333ac3d3bc0262a1c41a770196e4a668b7eee172c21e8629b7f2660292496add63720a3dcaf0a
- SSDEEP
  
  6144:YhMFV++TJ6wC7XK/AqxDc40XFjkc3cCbw4U4l3cnV0ZAvRDVb+pB7Z7:YhEVT/AqxA40XDbq49cnV0ZyRDVypf7
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2