a5211cbdb2b625c3a9b46eea5b78ae2239c064a50d76a8a39e61dac7baa57b43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5211cbdb2b625c3a9b46eea5b78ae2239c064a50d76a8a39e61dac7baa57b43
Size

295KB
Sample

221203-tk1d1aee85
MD5

526c5de8e228f1d5daa8152b48de11cd
SHA1

488742e07f74714bf9392909c5c1cea16702caf5
SHA256

a5211cbdb2b625c3a9b46eea5b78ae2239c064a50d76a8a39e61dac7baa57b43
SHA512

0bcb11beff39a66c9822120fba2a35451db57b687dc5280630bf53da84254fbd6813c4d73008f5822e3fdaf76c6b8c6bb4301a98530940a49a8c42289da941b7
SSDEEP

6144:c9Ncj86i7QaMyUtZahwg5dmgFDMH5hhZOxHg7SbOr16p+Baemv+:1h7tZkwgy9ZhbOZCSbOgPv

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  a5211cbdb2b625c3a9b46eea5b78ae2239c064a50d76a8a39e61dac7baa57b43
- Size
  
  295KB
- MD5
  
  526c5de8e228f1d5daa8152b48de11cd
- SHA1
  
  488742e07f74714bf9392909c5c1cea16702caf5
- SHA256
  
  a5211cbdb2b625c3a9b46eea5b78ae2239c064a50d76a8a39e61dac7baa57b43
- SHA512
  
  0bcb11beff39a66c9822120fba2a35451db57b687dc5280630bf53da84254fbd6813c4d73008f5822e3fdaf76c6b8c6bb4301a98530940a49a8c42289da941b7
- SSDEEP
  
  6144:c9Ncj86i7QaMyUtZahwg5dmgFDMH5hhZOxHg7SbOr16p+Baemv+:1h7tZkwgy9ZhbOZCSbOgPv
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2