bd42e7874abbf06aef4554a87f7a51307e7a912debc4c7c3b2d4aed462bfb3ad | Triage

Sharing

General

Target

35a50613e1405470493456d819ec7de0N.exe
Size

114KB
Sample

240904-z1bngaxenh
MD5

35a50613e1405470493456d819ec7de0
SHA1

36bd1859e4917e0fe3d1c6befec7aee0ed22c6d0
SHA256

bd42e7874abbf06aef4554a87f7a51307e7a912debc4c7c3b2d4aed462bfb3ad
SHA512

cbc10421e3fb9312f1144d32c5ee05f4807a254a3a0a93afbef99ed704ba959e5c292d635921f9d7d1bbd0384fb4db076313883dc1b3fb96bc6eb486c1d0ec6c
SSDEEP

1536:BteqKDlXvCDB04f5Gn/L8NRel1dwWXgRLtyu32z2AjfO:6lg35GT99wWX6Lth32zW

Score

7^/10

discovery persistence

Malware Config

Targets

- Target
  
  35a50613e1405470493456d819ec7de0N.exe
- Size
  
  114KB
- MD5
  
  35a50613e1405470493456d819ec7de0
- SHA1
  
  36bd1859e4917e0fe3d1c6befec7aee0ed22c6d0
- SHA256
  
  bd42e7874abbf06aef4554a87f7a51307e7a912debc4c7c3b2d4aed462bfb3ad
- SHA512
  
  cbc10421e3fb9312f1144d32c5ee05f4807a254a3a0a93afbef99ed704ba959e5c292d635921f9d7d1bbd0384fb4db076313883dc1b3fb96bc6eb486c1d0ec6c
- SSDEEP
  
  1536:BteqKDlXvCDB04f5Gn/L8NRel1dwWXgRLtyu32z2AjfO:6lg35GT99wWX6Lth32zW
Score

7^/10

discovery persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence