22edd9b0aa858616fb43b233990790562566f9674f202808a9931939bf5da004 | Triage

Sharing

General

Target

39381974641f637e7faaf4e14f0197dc
Size

252KB
Sample

231231-rfsggsbabr
MD5

39381974641f637e7faaf4e14f0197dc
SHA1

429621ed86c33c3ee9e24a640047aadaa29bc14a
SHA256

22edd9b0aa858616fb43b233990790562566f9674f202808a9931939bf5da004
SHA512

478eee8e7208064471f915751c029fe6a3ace24dac5394bb9469df1b5d483b294259edbaceae8a6fe03576e7dce6aa3d12c8d6d55649a1cb74b33ee63ea5a011
SSDEEP

6144:QVzVSleqEKiX2Lh7n0CqPgGATLZBBkhUt43essBAUz5WD:QV5SleqkkGCGA/deII

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  39381974641f637e7faaf4e14f0197dc
- Size
  
  252KB
- MD5
  
  39381974641f637e7faaf4e14f0197dc
- SHA1
  
  429621ed86c33c3ee9e24a640047aadaa29bc14a
- SHA256
  
  22edd9b0aa858616fb43b233990790562566f9674f202808a9931939bf5da004
- SHA512
  
  478eee8e7208064471f915751c029fe6a3ace24dac5394bb9469df1b5d483b294259edbaceae8a6fe03576e7dce6aa3d12c8d6d55649a1cb74b33ee63ea5a011
- SSDEEP
  
  6144:QVzVSleqEKiX2Lh7n0CqPgGATLZBBkhUt43essBAUz5WD:QV5SleqkkGCGA/deII
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2