301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f | Triage

Resubmissions

23/03/2024, 23:50

240323-3vttmsed88 10

12/12/2020, 10:26

201212-wddwj75xse 10

Sharing

General

Target

301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f.bin.sample
Size

413KB
Sample

240323-3vttmsed88
MD5

3023d7526b479ea3df315a5b1779a43d
SHA1

b5ae71b96a28b9353a4f33c5370ac18750937c17
SHA256

301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f
SHA512

67fe1cf7538e8ef76b6acbba99326af0de58464bf5710ae6fa7b85d73da9a84c58122de6b87c7d9560f0d366de711a95d03be231c1018eacb7489fd32aeb0834
SSDEEP

6144:OpZsqlbu151gFomsCfv6hdgnkG6FSXrIiucY6/4sTj3GUcqcPVpNghCQ:Ussu15qlsmShRG6mIiucN42qxqcC

Score

10^/10

evasion persistence

Malware Config

Targets

- Target
  
  301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f.bin.sample
- Size
  
  413KB
- MD5
  
  3023d7526b479ea3df315a5b1779a43d
- SHA1
  
  b5ae71b96a28b9353a4f33c5370ac18750937c17
- SHA256
  
  301a3f5017e578fb04b0eb33f45831bb9bb8318020e0a18d222ebea08bf1c75f
- SHA512
  
  67fe1cf7538e8ef76b6acbba99326af0de58464bf5710ae6fa7b85d73da9a84c58122de6b87c7d9560f0d366de711a95d03be231c1018eacb7489fd32aeb0834
- SSDEEP
  
  6144:OpZsqlbu151gFomsCfv6hdgnkG6FSXrIiucY6/4sTj3GUcqcPVpNghCQ:Ussu15qlsmShRG6mIiucN42qxqcC
Score

10^/10

evasion persistence
- Modifies WinLogon for persistence
  persistence
- Modifies security service
  evasion
- Deletes itself
- Adds Run key to start application
  persistence
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Create or Modify System Process

Windows Service

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistence