f4c9450208b5fe805a5bda89af3308e17b512f693893c120b8eea617fd03f77f | Triage

Sharing

General

Target

easyMalicious290f005eb89a.exe
Size

583KB
Sample

230704-vdw9fahc3t
MD5

c5432a72571b96840cceb1a9f3632e44
SHA1

00502b61a8221841057934d8df2d567fcae75112
SHA256

f4c9450208b5fe805a5bda89af3308e17b512f693893c120b8eea617fd03f77f
SHA512

e3bad37276be2762ee462a92b41c1e8ab114b8e2e40c2b383f2d765212436c93778269e5957d8731b45fefc9c036911e6916514cc64c4f63ece91406b0e8035d
SSDEEP

12288:51bz5/JrM6qJyGt9GO0S0QSoFohsMdXZ0aOHvw1mC/9:51bz5Rr/uyQt0SW5dXtjl

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  easyMalicious290f005eb89a.exe
- Size
  
  583KB
- MD5
  
  c5432a72571b96840cceb1a9f3632e44
- SHA1
  
  00502b61a8221841057934d8df2d567fcae75112
- SHA256
  
  f4c9450208b5fe805a5bda89af3308e17b512f693893c120b8eea617fd03f77f
- SHA512
  
  e3bad37276be2762ee462a92b41c1e8ab114b8e2e40c2b383f2d765212436c93778269e5957d8731b45fefc9c036911e6916514cc64c4f63ece91406b0e8035d
- SSDEEP
  
  12288:51bz5/JrM6qJyGt9GO0S0QSoFohsMdXZ0aOHvw1mC/9:51bz5Rr/uyQt0SW5dXtjl
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2