b813a85d856d50cc1a3273151f4b706960fd95c2e42c933042533f8a95dea2e1 | Triage

Sharing

General

Target

b813a85d856d50cc1a3273151f4b706960fd95c2e42c933042533f8a95dea2e1
Size

434KB
Sample

240630-bm9rcavdnj
MD5

ed1e3a7e07c3f2776c0bc59a6e47291c
SHA1

0559e7f227e93a8ca6b7b5e8c6369603f76d9b8e
SHA256

b813a85d856d50cc1a3273151f4b706960fd95c2e42c933042533f8a95dea2e1
SHA512

dd1a3d3ba15ff8e17e62fe33be93a106dca3d8d7acb8d054fcdbc6e615e34d0f247fb6f581029af6f9972736c0ba493706af8bbfd0b771252c051871015764d9
SSDEEP

12288:l/5Jqv0lcT4zfWqY1bZXSzn3MZgrpgiOz:lxJzo4huCn3QqOz

Score

10^/10

persistence

Malware Config

Targets

- Target
  
  b813a85d856d50cc1a3273151f4b706960fd95c2e42c933042533f8a95dea2e1
- Size
  
  434KB
- MD5
  
  ed1e3a7e07c3f2776c0bc59a6e47291c
- SHA1
  
  0559e7f227e93a8ca6b7b5e8c6369603f76d9b8e
- SHA256
  
  b813a85d856d50cc1a3273151f4b706960fd95c2e42c933042533f8a95dea2e1
- SHA512
  
  dd1a3d3ba15ff8e17e62fe33be93a106dca3d8d7acb8d054fcdbc6e615e34d0f247fb6f581029af6f9972736c0ba493706af8bbfd0b771252c051871015764d9
- SSDEEP
  
  12288:l/5Jqv0lcT4zfWqY1bZXSzn3MZgrpgiOz:lxJzo4huCn3QqOz
Score

10^/10

persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2