98ea752c554681d6cc83d840f8204c2e94e36c99608c2684b4c5d5112abad043 | Triage

Sharing

General

Target

98ea752c554681d6cc83d840f8204c2e94e36c99608c2684b4c5d5112abad043
Size

431KB
Sample

221204-lysbjscf5w
MD5

90ba6b89e665fa78866e60a7f2e11ccb
SHA1

6e6e0c2a8f985ac3d997812af3e57f250d125b03
SHA256

98ea752c554681d6cc83d840f8204c2e94e36c99608c2684b4c5d5112abad043
SHA512

02f0f94df888245497ae7e4371f9512b60b2ccb20b6097596629f04ea684387d12e8931c205c4a5a2832882e06d2cad3374196cd07839a89cc90a0716ae4de23
SSDEEP

12288:N90GvvX84eyOYcJyicw3+ojvkpBHYf6PfWv:P1M4eyOzMih+K8vHYS3

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  98ea752c554681d6cc83d840f8204c2e94e36c99608c2684b4c5d5112abad043
- Size
  
  431KB
- MD5
  
  90ba6b89e665fa78866e60a7f2e11ccb
- SHA1
  
  6e6e0c2a8f985ac3d997812af3e57f250d125b03
- SHA256
  
  98ea752c554681d6cc83d840f8204c2e94e36c99608c2684b4c5d5112abad043
- SHA512
  
  02f0f94df888245497ae7e4371f9512b60b2ccb20b6097596629f04ea684387d12e8931c205c4a5a2832882e06d2cad3374196cd07839a89cc90a0716ae4de23
- SSDEEP
  
  12288:N90GvvX84eyOYcJyicw3+ojvkpBHYf6PfWv:P1M4eyOzMih+K8vHYS3
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Install Root Certificate

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2