f4536b97c0bd042ab6355a6e4bc737e082bdadccf845f4a17d90d8a8dd5ddd6d | Triage

Sharing

General

Target

deb679ce05525877ad2238fde7f68300
Size

225KB
Sample

240326-kaqx5sha9t
MD5

deb679ce05525877ad2238fde7f68300
SHA1

bbc10e1cefa401a64b1763e7b1aa0739345a31ec
SHA256

f4536b97c0bd042ab6355a6e4bc737e082bdadccf845f4a17d90d8a8dd5ddd6d
SHA512

ca794a5b9e61b6bcad0a02203eb7218e96e52bd37d8dd9fbfff7bc27aeaf2d2947c3ea2575983bf7ca9a21104bef250a582c7cc5ab82dbb99ec7affa4e451c75
SSDEEP

6144:JsvlanXCnHs7wClbYxg99atKAUHaA3mH8H3lxwTlI+d:Jm8nXEHiVX99M72mH8H1xmI+

Score

7^/10

persistence

Malware Config

Targets

- Target
  
  deb679ce05525877ad2238fde7f68300
- Size
  
  225KB
- MD5
  
  deb679ce05525877ad2238fde7f68300
- SHA1
  
  bbc10e1cefa401a64b1763e7b1aa0739345a31ec
- SHA256
  
  f4536b97c0bd042ab6355a6e4bc737e082bdadccf845f4a17d90d8a8dd5ddd6d
- SHA512
  
  ca794a5b9e61b6bcad0a02203eb7218e96e52bd37d8dd9fbfff7bc27aeaf2d2947c3ea2575983bf7ca9a21104bef250a582c7cc5ab82dbb99ec7affa4e451c75
- SSDEEP
  
  6144:JsvlanXCnHs7wClbYxg99atKAUHaA3mH8H3lxwTlI+d:Jm8nXEHiVX99M72mH8H1xmI+
Score

7^/10

persistence
- Checks BIOS information in registry
  BIOS information is often read in order to detect sandboxing environments.
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2