f4d28d86603e244c0c980cef7c8c529d8cd1dae1532745e3ac47c5aa35d1c550 | Triage

Sharing

General

Target

easyMalicious17734565668a.exe
Size

155KB
Sample

230704-tzwdlafd56
MD5

9544bb6e39178a3fb55329f65fd4d186
SHA1

4006627f808868ba901f8a10828d72661180af19
SHA256

f4d28d86603e244c0c980cef7c8c529d8cd1dae1532745e3ac47c5aa35d1c550
SHA512

ca4c706d8160bdcf8d54f5c5a2335064eb1efdaade168ebb20c7e83023fea10682cb1ff209d512f2e4c5c1fbebb332ddaf88121a8d64ec58db8629bebfad9d78
SSDEEP

3072:t1B31bdBob2QXcLAb3ITW5qsiMUfuPFaKkTeULi3mwhMqzegqWJ:t731bdBaBfbYGiMUfGkiNBeI

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  easyMalicious17734565668a.exe
- Size
  
  155KB
- MD5
  
  9544bb6e39178a3fb55329f65fd4d186
- SHA1
  
  4006627f808868ba901f8a10828d72661180af19
- SHA256
  
  f4d28d86603e244c0c980cef7c8c529d8cd1dae1532745e3ac47c5aa35d1c550
- SHA512
  
  ca4c706d8160bdcf8d54f5c5a2335064eb1efdaade168ebb20c7e83023fea10682cb1ff209d512f2e4c5c1fbebb332ddaf88121a8d64ec58db8629bebfad9d78
- SSDEEP
  
  3072:t1B31bdBob2QXcLAb3ITW5qsiMUfuPFaKkTeULi3mwhMqzegqWJ:t731bdBaBfbYGiMUfGkiNBeI
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2