0a0b8d825474a3ef4633ae14caab1688b4f48b19f8a4fc3cb381ad5c7f1c32fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a0b8d825474a3ef4633ae14caab1688b4f48b19f8a4fc3cb381ad5c7f1c32fd.exe
Size

117KB
Sample

240726-qjh7jstdmd
MD5

9a597471c2a4dd6001477187add3177d
SHA1

199a87d09c233352b80b0deb8214214606d4c62f
SHA256

0a0b8d825474a3ef4633ae14caab1688b4f48b19f8a4fc3cb381ad5c7f1c32fd
SHA512

c1c72d1e3d640a37cc9d58846509a31189a65c24d6e9f540e5def0c3bf18b6b444b13ac50294146cecc209af8675b237b8cfc5b64e164415fe5a23079574499d
SSDEEP

1536:4aiqH1s+kCtrA2UMT0mTFibDKa1Xk/vP6JMi+WY+b0wBTQxGzwMNTsp:51B31bdBob2QX6nqIr+AvxGFZy

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0a0b8d825474a3ef4633ae14caab1688b4f48b19f8a4fc3cb381ad5c7f1c32fd.exe
- Size
  
  117KB
- MD5
  
  9a597471c2a4dd6001477187add3177d
- SHA1
  
  199a87d09c233352b80b0deb8214214606d4c62f
- SHA256
  
  0a0b8d825474a3ef4633ae14caab1688b4f48b19f8a4fc3cb381ad5c7f1c32fd
- SHA512
  
  c1c72d1e3d640a37cc9d58846509a31189a65c24d6e9f540e5def0c3bf18b6b444b13ac50294146cecc209af8675b237b8cfc5b64e164415fe5a23079574499d
- SSDEEP
  
  1536:4aiqH1s+kCtrA2UMT0mTFibDKa1Xk/vP6JMi+WY+b0wBTQxGzwMNTsp:51B31bdBob2QX6nqIr+AvxGFZy
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence