ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
Size

106KB
Sample

240812-ef4tasycmc
MD5

a7f06049baa342a5881df6f9e352abcd
SHA1

0e645d988a446c32b74f4688da782c949309cdaf
SHA256

ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
SHA512

3252e1b6ebc67eee2a153627f3e2f6629eaddae5dc8814ccd9d46e9cab7cca657e420a5f5eb731958e2c8471a7dcabf757731bfe6144669c35373a43ea4ba469
SSDEEP

1536:lBYL8mIvuYwmPt1opqIrYfLqT2VS41QgfpxX9T35Jqgf7an7YVUXicR:lBk8mIvuEPGb02TaQgX9T35JqOaUUScR

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
- Size
  
  106KB
- MD5
  
  a7f06049baa342a5881df6f9e352abcd
- SHA1
  
  0e645d988a446c32b74f4688da782c949309cdaf
- SHA256
  
  ece86c6891929e85ecbd0adb5ff84b8870537180c1d2987a55fadacfa182c8e2
- SHA512
  
  3252e1b6ebc67eee2a153627f3e2f6629eaddae5dc8814ccd9d46e9cab7cca657e420a5f5eb731958e2c8471a7dcabf757731bfe6144669c35373a43ea4ba469
- SSDEEP
  
  1536:lBYL8mIvuYwmPt1opqIrYfLqT2VS41QgfpxX9T35Jqgf7an7YVUXicR:lBk8mIvuEPGb02TaQgX9T35JqOaUUScR
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence