c55dc50091458936a19ab334cd1ae6acd8cdad33fa2e10e18ba0195836390173 | Triage

Sharing

General

Target

c55dc50091458936a19ab334cd1ae6acd8cdad33fa2e10e18ba0195836390173
Size

87KB
Sample

221203-f5z23scd7t
MD5

22f2c1c049b12df9cfeb4387ff7f8cc0
SHA1

ba66ae7ecd077bdbe619194ca80684ef774a2dbf
SHA256

c55dc50091458936a19ab334cd1ae6acd8cdad33fa2e10e18ba0195836390173
SHA512

5c171f123f7882660c9256aa1a68a7d002b455c405be15f6a45d09b2be8b7d8173c08174198a65c575678ee006e68661b952b370d2b6ef45f35f1eaccaab285d
SSDEEP

1536:uIewcKKiKQl2A5AD3IiSg1oFW6eg1ba2CylEecylEe0ylEe:uIeDKLKw2MALXSgWvHRCylAyloyl

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  c55dc50091458936a19ab334cd1ae6acd8cdad33fa2e10e18ba0195836390173
- Size
  
  87KB
- MD5
  
  22f2c1c049b12df9cfeb4387ff7f8cc0
- SHA1
  
  ba66ae7ecd077bdbe619194ca80684ef774a2dbf
- SHA256
  
  c55dc50091458936a19ab334cd1ae6acd8cdad33fa2e10e18ba0195836390173
- SHA512
  
  5c171f123f7882660c9256aa1a68a7d002b455c405be15f6a45d09b2be8b7d8173c08174198a65c575678ee006e68661b952b370d2b6ef45f35f1eaccaab285d
- SSDEEP
  
  1536:uIewcKKiKQl2A5AD3IiSg1oFW6eg1ba2CylEecylEe0ylEe:uIeDKLKw2MALXSgWvHRCylAyloyl
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2