f719c38f48827767400af80635fd4e8ca7d65631553c66992edd04b463753efb | Triage

Sharing

General

Target

NEAS.452a9139fce59cd44dacfd6c30e71280.exe
Size

210KB
Sample

231105-yrpnasdd62
MD5

452a9139fce59cd44dacfd6c30e71280
SHA1

dfc44e011d33d8ee28755f07202d610c09fcc80a
SHA256

f719c38f48827767400af80635fd4e8ca7d65631553c66992edd04b463753efb
SHA512

57536e9b65b4777cda0be71a3d3243858139d1b579f54288fc5bb3a9fb43998b82a181f9dbf2dc783424f76ef74ec514993a7941cdf0f10f5cd5a0dcd4bb08ce
SSDEEP

3072:HTI+O5HNkDxtVagroHSCpNce3oPOM7TC7BbCk+dZpp5bdAXPVaefq4Nxi/3:s5YRjBh3C7dULPiPVBg

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  NEAS.452a9139fce59cd44dacfd6c30e71280.exe
- Size
  
  210KB
- MD5
  
  452a9139fce59cd44dacfd6c30e71280
- SHA1
  
  dfc44e011d33d8ee28755f07202d610c09fcc80a
- SHA256
  
  f719c38f48827767400af80635fd4e8ca7d65631553c66992edd04b463753efb
- SHA512
  
  57536e9b65b4777cda0be71a3d3243858139d1b579f54288fc5bb3a9fb43998b82a181f9dbf2dc783424f76ef74ec514993a7941cdf0f10f5cd5a0dcd4bb08ce
- SSDEEP
  
  3072:HTI+O5HNkDxtVagroHSCpNce3oPOM7TC7BbCk+dZpp5bdAXPVaefq4Nxi/3:s5YRjBh3C7dULPiPVBg
Score

7^/10

persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2