c5b6ee8f86f5fbdd64566a63becb0e61844f2aa91a6f9bb82a60c9d03314ab20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5b6ee8f86f5fbdd64566a63becb0e61844f2aa91a6f9bb82a60c9d03314ab20
Size

276KB
Sample

221205-g6zclshd3y
MD5

00ae07e7ab54ea8ca70a2d74db7d63c6
SHA1

d0737647dfffee7e6271e17e908eb67c6309f151
SHA256

c5b6ee8f86f5fbdd64566a63becb0e61844f2aa91a6f9bb82a60c9d03314ab20
SHA512

5b8871831bb173ce05888e9f28c48cde654a602d7d1bdc6ee90042a75bbce5fae86b715f726c304db1d34371154c59f04fa723b3c8b4cc4745b60ca28e25962c
SSDEEP

6144:IcD08VhiUJw46Xjhbg6xDyv2GALijX1Na/HZuk:IcD08VwUJ76Xjh0sFXiJk

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  c5b6ee8f86f5fbdd64566a63becb0e61844f2aa91a6f9bb82a60c9d03314ab20
- Size
  
  276KB
- MD5
  
  00ae07e7ab54ea8ca70a2d74db7d63c6
- SHA1
  
  d0737647dfffee7e6271e17e908eb67c6309f151
- SHA256
  
  c5b6ee8f86f5fbdd64566a63becb0e61844f2aa91a6f9bb82a60c9d03314ab20
- SHA512
  
  5b8871831bb173ce05888e9f28c48cde654a602d7d1bdc6ee90042a75bbce5fae86b715f726c304db1d34371154c59f04fa723b3c8b4cc4745b60ca28e25962c
- SSDEEP
  
  6144:IcD08VhiUJw46Xjhbg6xDyv2GALijX1Na/HZuk:IcD08VwUJ76Xjh0sFXiJk
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2