f8c6e89acc7370fa4bcb8827f74adbf8abe21b1aae549ef4785fbaf3f3b14fdc | Triage

Sharing

General

Target

9cd99a65e2659613039cbfbd336a8f90N.exe
Size

784KB
Sample

240814-v2jy1sthpf
MD5

9cd99a65e2659613039cbfbd336a8f90
SHA1

48681c97f74e6e4fbac763fe99e0022075674537
SHA256

f8c6e89acc7370fa4bcb8827f74adbf8abe21b1aae549ef4785fbaf3f3b14fdc
SHA512

b76d6d77ee3e19daf5f389a6aa3f24654199c25daec7c6d5abe6e190f6ce0844141ea9625849401f1bf63aeb0ec5fe0c36b4e90be0e3f41f486bd60577524734
SSDEEP

24576:41b3jes09zLMNRgoDPETLRu5oSmnh2g7JLEI:4VeN9zQNRgkwRu5DQ2+L3

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  9cd99a65e2659613039cbfbd336a8f90N.exe
- Size
  
  784KB
- MD5
  
  9cd99a65e2659613039cbfbd336a8f90
- SHA1
  
  48681c97f74e6e4fbac763fe99e0022075674537
- SHA256
  
  f8c6e89acc7370fa4bcb8827f74adbf8abe21b1aae549ef4785fbaf3f3b14fdc
- SHA512
  
  b76d6d77ee3e19daf5f389a6aa3f24654199c25daec7c6d5abe6e190f6ce0844141ea9625849401f1bf63aeb0ec5fe0c36b4e90be0e3f41f486bd60577524734
- SSDEEP
  
  24576:41b3jes09zLMNRgoDPETLRu5oSmnh2g7JLEI:4VeN9zQNRgkwRu5DQ2+L3
Score

10^/10

persistence discovery
- Modifies WinLogon for persistence
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

discoverypersistence