1c17a717ff7caf182b5c6e37a37186064643718247ce3b4ad5133abfaf87daa7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

easy_Malicious_2ecd716094914315e6a829e4155f2a25f0c9de82b75334f4b5e4a51114597b3e.exe
Size

789KB
Sample

230704-sg67psfh8v
MD5

6ee06986e6eec708bf7b750b193a02e4
SHA1

84599abb45dfc56fac66965871b9e5fc5e72c3d7
SHA256

1c17a717ff7caf182b5c6e37a37186064643718247ce3b4ad5133abfaf87daa7
SHA512

9af6f6cf25816e23621cdd467343d5e19c89de155d96dbf7e5fba5584cc5713b43ddc9840fbae554a3aa3c6efe0f295acf14382b091d9f3ed9349639a3914bb9
SSDEEP

24576:I1btQ2D2MsZXiIfBYwCqviKC7BnSaI7Gk9rF:I4MsZyIuwCqviKw8L7Gk9F

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  easy_Malicious_2ecd716094914315e6a829e4155f2a25f0c9de82b75334f4b5e4a51114597b3e.exe
- Size
  
  789KB
- MD5
  
  6ee06986e6eec708bf7b750b193a02e4
- SHA1
  
  84599abb45dfc56fac66965871b9e5fc5e72c3d7
- SHA256
  
  1c17a717ff7caf182b5c6e37a37186064643718247ce3b4ad5133abfaf87daa7
- SHA512
  
  9af6f6cf25816e23621cdd467343d5e19c89de155d96dbf7e5fba5584cc5713b43ddc9840fbae554a3aa3c6efe0f295acf14382b091d9f3ed9349639a3914bb9
- SSDEEP
  
  24576:I1btQ2D2MsZXiIfBYwCqviKC7BnSaI7Gk9rF:I4MsZyIuwCqviKw8L7Gk9F
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2