1ada3efbfaf4a8f10bd94ec025b7c4f4581e5d5e3de8c7d06c68d20ea5964d2c | Triage

Sharing

General

Target

88885df7373d53bcf18a09d6bce77980N.exe
Size

784KB
Sample

240727-dv5tgaxapc
MD5

88885df7373d53bcf18a09d6bce77980
SHA1

6a474b0129c7957fcc7c5c62be189ecbe1349218
SHA256

1ada3efbfaf4a8f10bd94ec025b7c4f4581e5d5e3de8c7d06c68d20ea5964d2c
SHA512

d97b93952d6125eaebdc45b3ca146af8a15961895cd2dd43f485853fef8c6b28d451c7dff5097457c2c74df56e5c0247b9b9aa79517504af31baae7178515c06
SSDEEP

24576:K1bHLFagnHnCMuRFipdJV+uLO3DBdXgmYcGW:KragHdJVKVdXgFW

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  88885df7373d53bcf18a09d6bce77980N.exe
- Size
  
  784KB
- MD5
  
  88885df7373d53bcf18a09d6bce77980
- SHA1
  
  6a474b0129c7957fcc7c5c62be189ecbe1349218
- SHA256
  
  1ada3efbfaf4a8f10bd94ec025b7c4f4581e5d5e3de8c7d06c68d20ea5964d2c
- SHA512
  
  d97b93952d6125eaebdc45b3ca146af8a15961895cd2dd43f485853fef8c6b28d451c7dff5097457c2c74df56e5c0247b9b9aa79517504af31baae7178515c06
- SSDEEP
  
  24576:K1bHLFagnHnCMuRFipdJV+uLO3DBdXgmYcGW:KragHdJVKVdXgFW
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence