934dcbd09acb5b37edc332337b8306525156f43caed1d8ce681d6e691773b006 | Triage

Sharing

General

Target

934dcbd09acb5b37edc332337b8306525156f43caed1d8ce681d6e691773b006
Size

256KB
Sample

221205-pgc23she34
MD5

3e2999b0cc81521927add21a28d7a044
SHA1

61d19b2b7ef2fd0a4ca2aefb211c1722ffc094a1
SHA256

934dcbd09acb5b37edc332337b8306525156f43caed1d8ce681d6e691773b006
SHA512

269519dd705958bf4b662246a4ce36dd6606c5470e62d3d822f15566cabf2a6425cdc126aa49b8280bc8d1eaefacdd0cc95b263ea3179865996a2f87f284bc42
SSDEEP

6144:RV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:PUwRd0z/Op1T+xk4hut95fM

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  934dcbd09acb5b37edc332337b8306525156f43caed1d8ce681d6e691773b006
- Size
  
  256KB
- MD5
  
  3e2999b0cc81521927add21a28d7a044
- SHA1
  
  61d19b2b7ef2fd0a4ca2aefb211c1722ffc094a1
- SHA256
  
  934dcbd09acb5b37edc332337b8306525156f43caed1d8ce681d6e691773b006
- SHA512
  
  269519dd705958bf4b662246a4ce36dd6606c5470e62d3d822f15566cabf2a6425cdc126aa49b8280bc8d1eaefacdd0cc95b263ea3179865996a2f87f284bc42
- SSDEEP
  
  6144:RV4xNwRjJ+X1NkxIVcp1bT+xkhlxuhuMOoi5ldM:PUwRd0z/Op1T+xk4hut95fM
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2