02bd31d91343d05ec162371a10d72f21bf9b0723917e4123c8e049c02ffaa11e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44458ff795bf93dafa4e6d9c9c0ecf90N.exe
Size

117KB
Sample

240904-kbnjeaxajr
MD5

44458ff795bf93dafa4e6d9c9c0ecf90
SHA1

c96602375640bfb2b5f6d2410c24a25c9e02b7b0
SHA256

02bd31d91343d05ec162371a10d72f21bf9b0723917e4123c8e049c02ffaa11e
SHA512

0498e1f71f64aaa90de79a70084036c9b3e74ef42fb682c916a19021f5717a8427bdfe18bbf8875cbfc6ed37c677e36a4ac21c18e84462e7591c71a4215c0244
SSDEEP

1536:xtvU8PUy49lcNoKczYN3Ajw29CF/NqA3GXr/5qngUVpCizFwXo:ERt9+Bc0NQs24lAXb5RZA

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  44458ff795bf93dafa4e6d9c9c0ecf90N.exe
- Size
  
  117KB
- MD5
  
  44458ff795bf93dafa4e6d9c9c0ecf90
- SHA1
  
  c96602375640bfb2b5f6d2410c24a25c9e02b7b0
- SHA256
  
  02bd31d91343d05ec162371a10d72f21bf9b0723917e4123c8e049c02ffaa11e
- SHA512
  
  0498e1f71f64aaa90de79a70084036c9b3e74ef42fb682c916a19021f5717a8427bdfe18bbf8875cbfc6ed37c677e36a4ac21c18e84462e7591c71a4215c0244
- SSDEEP
  
  1536:xtvU8PUy49lcNoKczYN3Ajw29CF/NqA3GXr/5qngUVpCizFwXo:ERt9+Bc0NQs24lAXb5RZA
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence