22887c4dc3713a9f7a6e21d3bd57c1e54ed70813a69f5648e4cfe390f6e60936 | Triage

Sharing

General

Target

22887c4dc3713a9f7a6e21d3bd57c1e54ed70813a69f5648e4cfe390f6e60936
Size

272KB
Sample

221205-wby6pabe75
MD5

03aa2f29312ee733b1114f5eb5055f02
SHA1

d60ed1c7cc5cb66ffb04e30b67d3229d2453f57b
SHA256

22887c4dc3713a9f7a6e21d3bd57c1e54ed70813a69f5648e4cfe390f6e60936
SHA512

4d5ff1a056ddfda85081cafe70f44050d77c08aa2c424987719dc7082313ef73aef4cb6f6c88e66fe13c0afd435dde011a211c1f8e75ed360dbbee738a334c29
SSDEEP

6144:EbKYdIEGPaBh4Tg7Sr5lAfvPJSgvHrsl/gyYbotEa7l7hh:Ebb7BWSSVCRhHYR9sOd

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  22887c4dc3713a9f7a6e21d3bd57c1e54ed70813a69f5648e4cfe390f6e60936
- Size
  
  272KB
- MD5
  
  03aa2f29312ee733b1114f5eb5055f02
- SHA1
  
  d60ed1c7cc5cb66ffb04e30b67d3229d2453f57b
- SHA256
  
  22887c4dc3713a9f7a6e21d3bd57c1e54ed70813a69f5648e4cfe390f6e60936
- SHA512
  
  4d5ff1a056ddfda85081cafe70f44050d77c08aa2c424987719dc7082313ef73aef4cb6f6c88e66fe13c0afd435dde011a211c1f8e75ed360dbbee738a334c29
- SSDEEP
  
  6144:EbKYdIEGPaBh4Tg7Sr5lAfvPJSgvHrsl/gyYbotEa7l7hh:Ebb7BWSSVCRhHYR9sOd
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2