e17531fdc90d2cd7c1e76b26ff15017acb5ee6095ce52a9f5fb1f47693327787 | Triage

Sharing

General

Target

e17531fdc90d2cd7c1e76b26ff15017acb5ee6095ce52a9f5fb1f47693327787
Size

154KB
Sample

240806-d4p5dasdng
MD5

a503fb9ced155258b6e987cec19c55e7
SHA1

c05626004c1c410d27d2da718768ecaa1a73935d
SHA256

e17531fdc90d2cd7c1e76b26ff15017acb5ee6095ce52a9f5fb1f47693327787
SHA512

57cb84ae840392ad8f8de4040abc5228478d428cbf346a8a8fdb1d3592358306a87af8c167817151152a0cc3964a1e0528df3dbb108ba96f0cac9b7465975755
SSDEEP

3072:lBk8mIvuEPGb02TaQgGi3DhXF+tQayL6JjNw1cAZrXzT:lBPQkTdF+aayEjM1jT

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  e17531fdc90d2cd7c1e76b26ff15017acb5ee6095ce52a9f5fb1f47693327787
- Size
  
  154KB
- MD5
  
  a503fb9ced155258b6e987cec19c55e7
- SHA1
  
  c05626004c1c410d27d2da718768ecaa1a73935d
- SHA256
  
  e17531fdc90d2cd7c1e76b26ff15017acb5ee6095ce52a9f5fb1f47693327787
- SHA512
  
  57cb84ae840392ad8f8de4040abc5228478d428cbf346a8a8fdb1d3592358306a87af8c167817151152a0cc3964a1e0528df3dbb108ba96f0cac9b7465975755
- SSDEEP
  
  3072:lBk8mIvuEPGb02TaQgGi3DhXF+tQayL6JjNw1cAZrXzT:lBPQkTdF+aayEjM1jT
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence