a9504fddb4d2bb5c3c2af238a1b8e1a60105d3dbf0576dabb56dd82bdba3b68b | Triage

Sharing

General

Target

43434343.exe
Size

577KB
Sample

240422-y4wblsfg7t
MD5

dbfbb43a05e6dc400e28a8244c60ba25
SHA1

512a77466dac3f33af1ec28103f9bb2f89eb74c9
SHA256

a9504fddb4d2bb5c3c2af238a1b8e1a60105d3dbf0576dabb56dd82bdba3b68b
SHA512

a5339c4e878273886c6a97de1337c757a27a6b86aa4fb7e1815a22fe1a9e1ed2080ede612238255bee6021d8759c9ff5705aee3d5ef657dc5db151c117221986
SSDEEP

6144:ozN+SpinTfDha/wWvSUkl60e6VlWT8b9O8VZcs/CSMofaP0PE0gmLbSGxVznbGk5:oA2YbLnU2dPVle8ToSMo00xSGzPG

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  43434343.exe
- Size
  
  577KB
- MD5
  
  dbfbb43a05e6dc400e28a8244c60ba25
- SHA1
  
  512a77466dac3f33af1ec28103f9bb2f89eb74c9
- SHA256
  
  a9504fddb4d2bb5c3c2af238a1b8e1a60105d3dbf0576dabb56dd82bdba3b68b
- SHA512
  
  a5339c4e878273886c6a97de1337c757a27a6b86aa4fb7e1815a22fe1a9e1ed2080ede612238255bee6021d8759c9ff5705aee3d5ef657dc5db151c117221986
- SSDEEP
  
  6144:ozN+SpinTfDha/wWvSUkl60e6VlWT8b9O8VZcs/CSMofaP0PE0gmLbSGxVznbGk5:oA2YbLnU2dPVle8ToSMo00xSGzPG
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Modifies AppInit DLL entries
  persistence
- Loads dropped DLL
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Scheduled Task/Job

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Scheduled Task/Job

Defense Evasion

Modify Registry

Credential Access

Discovery

Query Registry

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1