44ef1ea44584c0012c789ec055632eab942a4e5c9638bdf63e2735ffce9e4b03 | Triage

Sharing

General

Target

07316f1c29fea60c876649ad47a7a070
Size

268KB
Sample

231229-3nca1sgham
MD5

07316f1c29fea60c876649ad47a7a070
SHA1

904fb86d06f7dcedc9ab830e9d1537d59d8c8839
SHA256

44ef1ea44584c0012c789ec055632eab942a4e5c9638bdf63e2735ffce9e4b03
SHA512

618acbc2724b660dc507e66b8c2976b24a0ca89333acfa61194c05ca9c15808429338e22e3288357bb6c4d031dd5c78e984eba3fd279738a0807928bc6ae3adc
SSDEEP

6144:5I1v9PfKoXjllMoVpfZLijwDAhtCx6o3yG4/xFk:54vFfVzv2qZitZFk

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  07316f1c29fea60c876649ad47a7a070
- Size
  
  268KB
- MD5
  
  07316f1c29fea60c876649ad47a7a070
- SHA1
  
  904fb86d06f7dcedc9ab830e9d1537d59d8c8839
- SHA256
  
  44ef1ea44584c0012c789ec055632eab942a4e5c9638bdf63e2735ffce9e4b03
- SHA512
  
  618acbc2724b660dc507e66b8c2976b24a0ca89333acfa61194c05ca9c15808429338e22e3288357bb6c4d031dd5c78e984eba3fd279738a0807928bc6ae3adc
- SSDEEP
  
  6144:5I1v9PfKoXjllMoVpfZLijwDAhtCx6o3yG4/xFk:54vFfVzv2qZitZFk
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2