fda70344e8804b8fa4a0c311a64e3faa0dd3958f6038b802a3b482806eb3bbad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fda70344e8804b8fa4a0c311a64e3faa0dd3958f6038b802a3b482806eb3bbad
Size

225KB
Sample

221205-gkc79abd28
MD5

f4ba9ecd4e024ffbef9af4338abe5a5c
SHA1

5ebe49d17ecfbcc060efec370cd02a6be19db17c
SHA256

fda70344e8804b8fa4a0c311a64e3faa0dd3958f6038b802a3b482806eb3bbad
SHA512

d289460e92613a83e9b4070eab23f93872fe712749611043f63cca1dc1f1243adfcc5f218c2754780f1b93207dfaa1655682ef0c04ac6182e4e2b265950220d2
SSDEEP

6144:d5PxYo2FpTkOLFmSpuuKilJdbAqzVz5nG2Zh:d5SPJkiFmSgu/l7EaZ5nGOh

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  fda70344e8804b8fa4a0c311a64e3faa0dd3958f6038b802a3b482806eb3bbad
- Size
  
  225KB
- MD5
  
  f4ba9ecd4e024ffbef9af4338abe5a5c
- SHA1
  
  5ebe49d17ecfbcc060efec370cd02a6be19db17c
- SHA256
  
  fda70344e8804b8fa4a0c311a64e3faa0dd3958f6038b802a3b482806eb3bbad
- SHA512
  
  d289460e92613a83e9b4070eab23f93872fe712749611043f63cca1dc1f1243adfcc5f218c2754780f1b93207dfaa1655682ef0c04ac6182e4e2b265950220d2
- SSDEEP
  
  6144:d5PxYo2FpTkOLFmSpuuKilJdbAqzVz5nG2Zh:d5SPJkiFmSgu/l7EaZ5nGOh
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2