f6c926fee308b55f2410d641587814f0b009d41b2aafd19d6bf81f4ff0a202f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6c926fee308b55f2410d641587814f0b009d41b2aafd19d6bf81f4ff0a202f3
Size

68KB
Sample

221203-xej2lsae3z
MD5

463fbd1e4060b476b9807a855f4c7427
SHA1

3a343ca5d2da38c281925527e2a741491d4769f7
SHA256

f6c926fee308b55f2410d641587814f0b009d41b2aafd19d6bf81f4ff0a202f3
SHA512

2ab3c9c49c949114d46ba1b55441686d767be898361cb1c1849fca470b0e529270efe2c3cba21a321d0910eaf66c9fe6174e34e6d05bddb527f11fa44013d012
SSDEEP

768:qwm2qRQOP9JYz3pBSoU4vabUE+Az2Y+MdjZPbJr50urUA8BXV0XrKCB0W:U2qRQOFJ0BTj0U4zflQHJI0

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  f6c926fee308b55f2410d641587814f0b009d41b2aafd19d6bf81f4ff0a202f3
- Size
  
  68KB
- MD5
  
  463fbd1e4060b476b9807a855f4c7427
- SHA1
  
  3a343ca5d2da38c281925527e2a741491d4769f7
- SHA256
  
  f6c926fee308b55f2410d641587814f0b009d41b2aafd19d6bf81f4ff0a202f3
- SHA512
  
  2ab3c9c49c949114d46ba1b55441686d767be898361cb1c1849fca470b0e529270efe2c3cba21a321d0910eaf66c9fe6174e34e6d05bddb527f11fa44013d012
- SSDEEP
  
  768:qwm2qRQOP9JYz3pBSoU4vabUE+Az2Y+MdjZPbJr50urUA8BXV0XrKCB0W:U2qRQOFJ0BTj0U4zflQHJI0
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops startup file
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2