f68bfad748f19effe6f7dbf01af784d50f609db489aa1dad64e344fd5aa79900 | Triage

Sharing

General

Target

403c5b7d6b4c43a6570ee4edd3fb064a
Size

86KB
Sample

240104-h5bqlabadn
MD5

403c5b7d6b4c43a6570ee4edd3fb064a
SHA1

3da9fee3d71f8b2241adebf52ccaa781379a6172
SHA256

f68bfad748f19effe6f7dbf01af784d50f609db489aa1dad64e344fd5aa79900
SHA512

e9b8392eac3bd80c49fe3497f963571031df475f180d02ab38bc522857aef8408936abfbb7c214b842c82e09169097a65f7dba6b1e5b7179253da6b121300d08
SSDEEP

1536:0oObn4lr+6PYqQWo6ktCC/PLl+lZguclK1Xdu5AAqKhnQpR5J+:m3+Pvo6ktz/PLl+IutYAuhQD+

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  403c5b7d6b4c43a6570ee4edd3fb064a
- Size
  
  86KB
- MD5
  
  403c5b7d6b4c43a6570ee4edd3fb064a
- SHA1
  
  3da9fee3d71f8b2241adebf52ccaa781379a6172
- SHA256
  
  f68bfad748f19effe6f7dbf01af784d50f609db489aa1dad64e344fd5aa79900
- SHA512
  
  e9b8392eac3bd80c49fe3497f963571031df475f180d02ab38bc522857aef8408936abfbb7c214b842c82e09169097a65f7dba6b1e5b7179253da6b121300d08
- SSDEEP
  
  1536:0oObn4lr+6PYqQWo6ktCC/PLl+lZguclK1Xdu5AAqKhnQpR5J+:m3+Pvo6ktz/PLl+IutYAuhQD+
Score

7^/10

persistence
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2