51e5d607d6009973f6bd5445a81b57bb6f485b25eabf70f51d37f4c6da777864 | Triage

Sharing

General

Target

5a9718b59b789af03134e62c87514bf0N.exe
Size

217KB
Sample

240826-dtvxwasaqf
MD5

5a9718b59b789af03134e62c87514bf0
SHA1

8b5a822bfd9d345bac7ee2e1cf02f3231fadaeb1
SHA256

51e5d607d6009973f6bd5445a81b57bb6f485b25eabf70f51d37f4c6da777864
SHA512

71dd8acc8865b3c01dff496a0ec3f5b2b938e6b64bb1a3fde39bbd51ce2aabfaf674c431a4ccfbb12a03b3d4cfcb3f4af31022cd74e4c57a6888fc8050496930
SSDEEP

6144:cnyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb:9Edp8csKpE7XX

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  5a9718b59b789af03134e62c87514bf0N.exe
- Size
  
  217KB
- MD5
  
  5a9718b59b789af03134e62c87514bf0
- SHA1
  
  8b5a822bfd9d345bac7ee2e1cf02f3231fadaeb1
- SHA256
  
  51e5d607d6009973f6bd5445a81b57bb6f485b25eabf70f51d37f4c6da777864
- SHA512
  
  71dd8acc8865b3c01dff496a0ec3f5b2b938e6b64bb1a3fde39bbd51ce2aabfaf674c431a4ccfbb12a03b3d4cfcb3f4af31022cd74e4c57a6888fc8050496930
- SSDEEP
  
  6144:cnyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXb:9Edp8csKpE7XX
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence