6a39e41394e418f1d96fdded86c1a994ce359c4cfb943daad3cb97125c25f6ab | Triage

Sharing

General

Target

wwlib.dll
Size

26KB
Sample

240123-rapteaahhr
MD5

f20ca31b829252aecabeae7ba2e3ec60
SHA1

2a06a4538bb981c33f64a28bdfefdbf6b536aba0
SHA256

6a39e41394e418f1d96fdded86c1a994ce359c4cfb943daad3cb97125c25f6ab
SHA512

42b7b68e141076382cca744ebc5ebb27e886e4cf8d2530e0e8e69bbaafc182e62fd16db17aa6f1223b679054ff9ee0baa4caa5c1a8124008eb5bca0351b91341
SSDEEP

384:h2EYLKywcbyMIRp7NH10MI6aCI2Ldnc/+h/rI//EZYGo9RsTZeGgaRZBpAG3YF8l:BYLl7IvBZZwuTg1IjAGYDROcRZS

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  wwlib.dll
- Size
  
  26KB
- MD5
  
  f20ca31b829252aecabeae7ba2e3ec60
- SHA1
  
  2a06a4538bb981c33f64a28bdfefdbf6b536aba0
- SHA256
  
  6a39e41394e418f1d96fdded86c1a994ce359c4cfb943daad3cb97125c25f6ab
- SHA512
  
  42b7b68e141076382cca744ebc5ebb27e886e4cf8d2530e0e8e69bbaafc182e62fd16db17aa6f1223b679054ff9ee0baa4caa5c1a8124008eb5bca0351b91341
- SSDEEP
  
  384:h2EYLKywcbyMIRp7NH10MI6aCI2Ldnc/+h/rI//EZYGo9RsTZeGgaRZBpAG3YF8l:BYLl7IvBZZwuTg1IjAGYDROcRZS
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2