8854b75d96e13a1aedd219e71ceb9ba5c5e72a25000651821d99aeee9b98c3ae | Triage

Sharing

General

Target

8854b75d96e13a1aedd219e71ceb9ba5c5e72a25000651821d99aeee9b98c3ae
Size

3.4MB
Sample

240723-3y9dhazaje
MD5

796ddfcacf1b60509ba851ad6a06f52e
SHA1

c85b456b732dd4aec1840b47911280245f70bb0e
SHA256

8854b75d96e13a1aedd219e71ceb9ba5c5e72a25000651821d99aeee9b98c3ae
SHA512

ade8f015f95a97201cb09df1c2deec44167afc70986911d7f616eac14729b12f7a109f47c70ec208bbbc7992aaf757822efb1af2f7c285b812da1d14b28f687b
SSDEEP

98304:4Y3clhWcS2oXsgXc6X/D/IIhhXqeIDCi39r4O/ix3g+IE6O:8WcNoXua/DjXqjDT90iOoE6O

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8854b75d96e13a1aedd219e71ceb9ba5c5e72a25000651821d99aeee9b98c3ae
- Size
  
  3.4MB
- MD5
  
  796ddfcacf1b60509ba851ad6a06f52e
- SHA1
  
  c85b456b732dd4aec1840b47911280245f70bb0e
- SHA256
  
  8854b75d96e13a1aedd219e71ceb9ba5c5e72a25000651821d99aeee9b98c3ae
- SHA512
  
  ade8f015f95a97201cb09df1c2deec44167afc70986911d7f616eac14729b12f7a109f47c70ec208bbbc7992aaf757822efb1af2f7c285b812da1d14b28f687b
- SSDEEP
  
  98304:4Y3clhWcS2oXsgXc6X/D/IIhhXqeIDCi39r4O/ix3g+IE6O:8WcNoXua/DjXqjDT90iOoE6O
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence