192b9a270bf7b1c5250e9669954ab6368b2b4cca2e55f9c9404fb9a9045bd704 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

192b9a270bf7b1c5250e9669954ab6368b2b4cca2e55f9c9404fb9a9045bd704
Size

3.4MB
Sample

221205-gd354aeh8w
MD5

72fe62ed6e97a052d0a6eadf5bd39fa4
SHA1

6379ad686844e84840eaaf29892a14c272aa7dd7
SHA256

192b9a270bf7b1c5250e9669954ab6368b2b4cca2e55f9c9404fb9a9045bd704
SHA512

fd2354c6be16445a24b57b4431a268d86c93d839da3e7ad80155853ffa55ec25ed243f19ce2b84a06bd5abf400a9afcf589b49568d6f216eb51b479cb80206b5
SSDEEP

98304:yC9huP8d6z9B66duOXrj/phOtNrFVIRH2O89iA0qPH:MOM9B6euQr2tuNdXqf

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  192b9a270bf7b1c5250e9669954ab6368b2b4cca2e55f9c9404fb9a9045bd704
- Size
  
  3.4MB
- MD5
  
  72fe62ed6e97a052d0a6eadf5bd39fa4
- SHA1
  
  6379ad686844e84840eaaf29892a14c272aa7dd7
- SHA256
  
  192b9a270bf7b1c5250e9669954ab6368b2b4cca2e55f9c9404fb9a9045bd704
- SHA512
  
  fd2354c6be16445a24b57b4431a268d86c93d839da3e7ad80155853ffa55ec25ed243f19ce2b84a06bd5abf400a9afcf589b49568d6f216eb51b479cb80206b5
- SSDEEP
  
  98304:yC9huP8d6z9B66duOXrj/phOtNrFVIRH2O89iA0qPH:MOM9B6euQr2tuNdXqf
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2