e35edac4e88361c58dbde64b2f8f8af12f14141712720dddbb6dcdaf2d4dfd97 | Triage

Sharing

General

Target

e35edac4e88361c58dbde64b2f8f8af12f14141712720dddbb6dcdaf2d4dfd97
Size

113KB
Sample

240902-fqtazstclf
MD5

305068ca946382c01050d3b72738c893
SHA1

a4339ff3113886891ad2c48e87774cb3eb6160c5
SHA256

e35edac4e88361c58dbde64b2f8f8af12f14141712720dddbb6dcdaf2d4dfd97
SHA512

250d252b2de44c0852a587a55afdd42f4135d198fe65336f93cdc3830fd8517d2d99c11bf79b7aabb592c2143a0fe7302f41edc03d6a44e352e6d614ba9be16c
SSDEEP

1536:BteqKDlXvCDB04f5Gn/L8NRel1cwPuVOFUUVKZuux0F4TvP:alg35GT98wPOOFUYKZuu++

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  e35edac4e88361c58dbde64b2f8f8af12f14141712720dddbb6dcdaf2d4dfd97
- Size
  
  113KB
- MD5
  
  305068ca946382c01050d3b72738c893
- SHA1
  
  a4339ff3113886891ad2c48e87774cb3eb6160c5
- SHA256
  
  e35edac4e88361c58dbde64b2f8f8af12f14141712720dddbb6dcdaf2d4dfd97
- SHA512
  
  250d252b2de44c0852a587a55afdd42f4135d198fe65336f93cdc3830fd8517d2d99c11bf79b7aabb592c2143a0fe7302f41edc03d6a44e352e6d614ba9be16c
- SSDEEP
  
  1536:BteqKDlXvCDB04f5Gn/L8NRel1cwPuVOFUUVKZuux0F4TvP:alg35GT98wPOOFUYKZuu++
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence