376b0d8fb80858c81d3e0536b9dc4e7be10948118f1aefe449a1f3d32eadbc9d | Triage

Sharing

General

Target

8cb12865a71d87d7311228712db74940N.exe
Size

2.3MB
Sample

240806-lfc4xazbmf
MD5

8cb12865a71d87d7311228712db74940
SHA1

5015be61802f5b83ca32d637f30df892d8aca0e2
SHA256

376b0d8fb80858c81d3e0536b9dc4e7be10948118f1aefe449a1f3d32eadbc9d
SHA512

0ce4b7ec46da883a6485195f7d3b872a9bd3fef8593b595069868f05720c593a17060dd92ffbc7b7c0b91e362a9abd2365a280eed02090ee1e0e4053f4861e68
SSDEEP

49152:ub+yLLwRrB3tRPltBW5LqLM4DtipK6FvMK7m/1OavYc+F:jwLu13B68g+tiptm9Uc+F

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  8cb12865a71d87d7311228712db74940N.exe
- Size
  
  2.3MB
- MD5
  
  8cb12865a71d87d7311228712db74940
- SHA1
  
  5015be61802f5b83ca32d637f30df892d8aca0e2
- SHA256
  
  376b0d8fb80858c81d3e0536b9dc4e7be10948118f1aefe449a1f3d32eadbc9d
- SHA512
  
  0ce4b7ec46da883a6485195f7d3b872a9bd3fef8593b595069868f05720c593a17060dd92ffbc7b7c0b91e362a9abd2365a280eed02090ee1e0e4053f4861e68
- SSDEEP
  
  49152:ub+yLLwRrB3tRPltBW5LqLM4DtipK6FvMK7m/1OavYc+F:jwLu13B68g+tiptm9Uc+F
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence