Overview

overview

10

Static

static

3

481f90a153...09.exe

windows7-x64

3

481f90a153...09.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    481f90a1533223b37513642e6d63bb09

  • Size

    76KB

  • Sample

    240107-fxe2yagbg7

  • MD5

    481f90a1533223b37513642e6d63bb09

  • SHA1

    19cf88c6c792515d02ee0723f5feb7d0e8e9cb55

  • SHA256

    22a83e6d0442a59aa497e6438a3bb2c6f8232284cfb7ff0cc8897c90eadb5931

  • SHA512

    482101830f63152183e3e5a9ed4c257d7963fcd031552ea04b158e694f9640b779cbae806220e2e3a81442efe93fc71721db6b8799ff1dc43c31a2f22312225f

  • SSDEEP

    1536:abQp1sBvlV0euusG80GS4KshictqhX7xMaB5z4YwB28UwnAScJWS:a8pOlV0BvG8tS4NictqxP4X24A7T

Score
10/10
persistence

Malware Config

Targets

    • Target

      481f90a1533223b37513642e6d63bb09

    • Size

      76KB

    • MD5

      481f90a1533223b37513642e6d63bb09

    • SHA1

      19cf88c6c792515d02ee0723f5feb7d0e8e9cb55

    • SHA256

      22a83e6d0442a59aa497e6438a3bb2c6f8232284cfb7ff0cc8897c90eadb5931

    • SHA512

      482101830f63152183e3e5a9ed4c257d7963fcd031552ea04b158e694f9640b779cbae806220e2e3a81442efe93fc71721db6b8799ff1dc43c31a2f22312225f

    • SSDEEP

      1536:abQp1sBvlV0euusG80GS4KshictqhX7xMaB5z4YwB28UwnAScJWS:a8pOlV0BvG8tS4NictqxP4X24A7T

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Privilege Escalation

Boot or Logon Autostart Execution

1
T1547

Winlogon Helper DLL

1
T1547.004

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks