2f64f147556850186d10885a85dccc7ec2dc469f5bfbbd6c206110fe99d8d2a0 | Triage

Sharing

General

Target

easy_Malicious_0810fa0520bc34723308aade129fb0c211a4c4b8228add83eea10dd65b947971.exe
Size

1008KB
Sample

230704-sdq2baec39
MD5

2e429a083f98901cab68156138dfc0e7
SHA1

d9c339f22f2742c6a2249c754f6f82846f9dd146
SHA256

2f64f147556850186d10885a85dccc7ec2dc469f5bfbbd6c206110fe99d8d2a0
SHA512

3a00e202997037bb4807616510a8a1ab98e9b5b25a6c78f365f88f61881b605df879488ae48e3ab2ef0c9347c3554ca983f1503712b6405aa167fd449973b8ec
SSDEEP

24576:c1bUJsF1xrlsgN/f0GrruYz6a3QYbHB3VGlYiWUi1yhkG:cuJUxrlh/ffuIzhUzWUi1yX

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  easy_Malicious_0810fa0520bc34723308aade129fb0c211a4c4b8228add83eea10dd65b947971.exe
- Size
  
  1008KB
- MD5
  
  2e429a083f98901cab68156138dfc0e7
- SHA1
  
  d9c339f22f2742c6a2249c754f6f82846f9dd146
- SHA256
  
  2f64f147556850186d10885a85dccc7ec2dc469f5bfbbd6c206110fe99d8d2a0
- SHA512
  
  3a00e202997037bb4807616510a8a1ab98e9b5b25a6c78f365f88f61881b605df879488ae48e3ab2ef0c9347c3554ca983f1503712b6405aa167fd449973b8ec
- SSDEEP
  
  24576:c1bUJsF1xrlsgN/f0GrruYz6a3QYbHB3VGlYiWUi1yhkG:cuJUxrlh/ffuIzhUzWUi1yX
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2