bcce91d859d190f7010335132cba38d693fb09c12fd3bc56d7113e11eb98c153 | Triage

Sharing

General

Target

easy_Malicious_1bdfe96ba74b30dfb939b2d112734d308210f57593812c6b8c461f8f7baf99db.exe
Size

103KB
Sample

230704-sts6lsgd5v
MD5

2c4a5bbad70896d8e6bd1f19bc2c58d7
SHA1

241fc6f370c44d7b01774140e8a032e8d8a19e23
SHA256

bcce91d859d190f7010335132cba38d693fb09c12fd3bc56d7113e11eb98c153
SHA512

4da36686511e94a0fd15e2dbbe86d8d6757265bd646ad7af8e4c8b18f6fc0e79454e4138ae165b3f6770b842166eb1110be40ea8a552ae911d278ed37210f2b1
SSDEEP

1536:kaiqH1s+kCtrA2UMT0mTFibDKa1XjVNgks30UIf+8D/zGNZ4Xl9/kgY80AP:t1B31bdBob2QXHgkP+6RlwAP

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  easy_Malicious_1bdfe96ba74b30dfb939b2d112734d308210f57593812c6b8c461f8f7baf99db.exe
- Size
  
  103KB
- MD5
  
  2c4a5bbad70896d8e6bd1f19bc2c58d7
- SHA1
  
  241fc6f370c44d7b01774140e8a032e8d8a19e23
- SHA256
  
  bcce91d859d190f7010335132cba38d693fb09c12fd3bc56d7113e11eb98c153
- SHA512
  
  4da36686511e94a0fd15e2dbbe86d8d6757265bd646ad7af8e4c8b18f6fc0e79454e4138ae165b3f6770b842166eb1110be40ea8a552ae911d278ed37210f2b1
- SSDEEP
  
  1536:kaiqH1s+kCtrA2UMT0mTFibDKa1XjVNgks30UIf+8D/zGNZ4Xl9/kgY80AP:t1B31bdBob2QXHgkP+6RlwAP
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2