5320dc43e330adc3ae72abe6107e4fe869b1d7e6e6a0681662d4616c38e3df72 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5320dc43e330adc3ae72abe6107e4fe869b1d7e6e6a0681662d4616c38e3df72
Size

152KB
Sample

240909-1gbd2a1fnr
MD5

00727bd9504952708c908ce10fc42be0
SHA1

5ff223111b984dd2ebdfb46333b4e23a53fe18a7
SHA256

5320dc43e330adc3ae72abe6107e4fe869b1d7e6e6a0681662d4616c38e3df72
SHA512

575af2de47dc884ab0e3231ea910075b3152bdf3302368daedf0bada7a32a9d127bbb8d732fdc1cb7be089d3bd66fc8db38839ad1d1f3d97783e6eb938fb46ec
SSDEEP

3072:lBk8mIvuEPGb02TaQgqbOhmzJGvfLnxZ+jDAzr:lBPQpShmw3kAX

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  5320dc43e330adc3ae72abe6107e4fe869b1d7e6e6a0681662d4616c38e3df72
- Size
  
  152KB
- MD5
  
  00727bd9504952708c908ce10fc42be0
- SHA1
  
  5ff223111b984dd2ebdfb46333b4e23a53fe18a7
- SHA256
  
  5320dc43e330adc3ae72abe6107e4fe869b1d7e6e6a0681662d4616c38e3df72
- SHA512
  
  575af2de47dc884ab0e3231ea910075b3152bdf3302368daedf0bada7a32a9d127bbb8d732fdc1cb7be089d3bd66fc8db38839ad1d1f3d97783e6eb938fb46ec
- SSDEEP
  
  3072:lBk8mIvuEPGb02TaQgqbOhmzJGvfLnxZ+jDAzr:lBPQpShmw3kAX
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence