942d5aafde67be90572bbf18ca19867ea2e49b74b0a99575d2b7fbe6b7ec334a | Triage

Sharing

General

Target

942d5aafde67be90572bbf18ca19867ea2e49b74b0a99575d2b7fbe6b7ec334a
Size

217KB
Sample

240902-bm4v4axdpp
MD5

406424f19b14bbb1f2744aff443dff7a
SHA1

011365e0e952fbdb7dfc7360347b6e19799a5eb8
SHA256

942d5aafde67be90572bbf18ca19867ea2e49b74b0a99575d2b7fbe6b7ec334a
SHA512

156f65afd71dc70aa8f11c629a7a8d9ac62d9d5305c5a45314cf4975eb64521e0580bd15bbd93ae7b2027ef2f5d8405ce99a479fee27f8ec248dd08764b1932f
SSDEEP

6144:hnyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXbR:KEdp8csKpE7XXg

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  942d5aafde67be90572bbf18ca19867ea2e49b74b0a99575d2b7fbe6b7ec334a
- Size
  
  217KB
- MD5
  
  406424f19b14bbb1f2744aff443dff7a
- SHA1
  
  011365e0e952fbdb7dfc7360347b6e19799a5eb8
- SHA256
  
  942d5aafde67be90572bbf18ca19867ea2e49b74b0a99575d2b7fbe6b7ec334a
- SHA512
  
  156f65afd71dc70aa8f11c629a7a8d9ac62d9d5305c5a45314cf4975eb64521e0580bd15bbd93ae7b2027ef2f5d8405ce99a479fee27f8ec248dd08764b1932f
- SSDEEP
  
  6144:hnyiqVQBf0EaIp8fkTJJsK1eEzEB1XjrkXbR:KEdp8csKpE7XXg
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence