d29281c7193b09f0eb4deb1ab85e263701527a318903bcbb12533f99bd6d13bf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d29281c7193b09f0eb4deb1ab85e263701527a318903bcbb12533f99bd6d13bf
Size

141KB
Sample

221204-lq1mysca3t
MD5

1ab7277b32d3f6f0f510df3e3441f756
SHA1

e2c1e139a103b6b7bece299dbd3b7657d5399807
SHA256

d29281c7193b09f0eb4deb1ab85e263701527a318903bcbb12533f99bd6d13bf
SHA512

86f47aacd93002a816f824178143c6288a945c7d05139dba50bc91b8499953c7fb466c3828824db7655ce8852889abda74d5607b568bb83c52a9d4c0f27010c1
SSDEEP

1536:p5unRtH3imqV74A6J6SQeh+/sLYaRhdsRxOV:DQRt5qV7WYSQehWsLYajLV

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  d29281c7193b09f0eb4deb1ab85e263701527a318903bcbb12533f99bd6d13bf
- Size
  
  141KB
- MD5
  
  1ab7277b32d3f6f0f510df3e3441f756
- SHA1
  
  e2c1e139a103b6b7bece299dbd3b7657d5399807
- SHA256
  
  d29281c7193b09f0eb4deb1ab85e263701527a318903bcbb12533f99bd6d13bf
- SHA512
  
  86f47aacd93002a816f824178143c6288a945c7d05139dba50bc91b8499953c7fb466c3828824db7655ce8852889abda74d5607b568bb83c52a9d4c0f27010c1
- SSDEEP
  
  1536:p5unRtH3imqV74A6J6SQeh+/sLYaRhdsRxOV:DQRt5qV7WYSQehWsLYajLV
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2