5a57eda1f908e97c0d99ebb428e7b23bfc8a0b7533b99459c069de9d53c70b29 | Triage

Sharing

General

Target

c4adf087179f7a7a58329c2ee1d7e0fb
Size

23KB
Sample

240313-cdsbdahe7v
MD5

c4adf087179f7a7a58329c2ee1d7e0fb
SHA1

99404eec5b52122a81cfc81cd2521209bb25bc11
SHA256

5a57eda1f908e97c0d99ebb428e7b23bfc8a0b7533b99459c069de9d53c70b29
SHA512

5374f6279da198a99db7292cf89e073cf9dc9af96adc34c3bc6f21beffe507c40837414f1fc2deb52580998ddf8b2bbe4347f94e299a571881a465810132eab7
SSDEEP

384:MzzeBf3/4rcApr1dhxgSDDdd5AXYBKjuh9RMO0cUuvU60wWwvXG9:1BfP4rrrngSfCS0A9RMFcfvUfnOXG9

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  c4adf087179f7a7a58329c2ee1d7e0fb
- Size
  
  23KB
- MD5
  
  c4adf087179f7a7a58329c2ee1d7e0fb
- SHA1
  
  99404eec5b52122a81cfc81cd2521209bb25bc11
- SHA256
  
  5a57eda1f908e97c0d99ebb428e7b23bfc8a0b7533b99459c069de9d53c70b29
- SHA512
  
  5374f6279da198a99db7292cf89e073cf9dc9af96adc34c3bc6f21beffe507c40837414f1fc2deb52580998ddf8b2bbe4347f94e299a571881a465810132eab7
- SSDEEP
  
  384:MzzeBf3/4rcApr1dhxgSDDdd5AXYBKjuh9RMO0cUuvU60wWwvXG9:1BfP4rrrngSfCS0A9RMFcfvUfnOXG9
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Adds Run key to start application
  persistence
- Drops desktop.ini file(s)
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2