c91d3b076c3cafa856a8abecb18b4b34a4582923b57dfdf92c3183729da55dbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c91d3b076c3cafa856a8abecb18b4b34a4582923b57dfdf92c3183729da55dbd
Size

320KB
Sample

221203-w9dyeaaa31
MD5

5cb24ce544eb432e1c5746aa1b083638
SHA1

f2656084c4934615e9cdf2d2bf970f0cd8fe761b
SHA256

c91d3b076c3cafa856a8abecb18b4b34a4582923b57dfdf92c3183729da55dbd
SHA512

d2eec4074ef817acdabc5e9a3105cfe5fb50c0fd12c863bf4fd4ef9151a4877f9a53381d40aead4950622bab35ca67bec409db745ac60c8890b289073ed16570
SSDEEP

1536:vfzD51CMXahcG9YpF8GJoTbhxf2TUmKPcry3qchQejg+HwJgfolmlxbU7mmj4MUQ:vrKMXahxI12ofBFIi

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  c91d3b076c3cafa856a8abecb18b4b34a4582923b57dfdf92c3183729da55dbd
- Size
  
  320KB
- MD5
  
  5cb24ce544eb432e1c5746aa1b083638
- SHA1
  
  f2656084c4934615e9cdf2d2bf970f0cd8fe761b
- SHA256
  
  c91d3b076c3cafa856a8abecb18b4b34a4582923b57dfdf92c3183729da55dbd
- SHA512
  
  d2eec4074ef817acdabc5e9a3105cfe5fb50c0fd12c863bf4fd4ef9151a4877f9a53381d40aead4950622bab35ca67bec409db745ac60c8890b289073ed16570
- SSDEEP
  
  1536:vfzD51CMXahcG9YpF8GJoTbhxf2TUmKPcry3qchQejg+HwJgfolmlxbU7mmj4MUQ:vrKMXahxI12ofBFIi
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2