f00d363d292d0e9500e055df0d1e95ecab1191070010a34b5a02eb3f5cf6f4b8 | Triage

Sharing

General

Target

f00d363d292d0e9500e055df0d1e95ecab1191070010a34b5a02eb3f5cf6f4b8N
Size

326KB
Sample

240920-elk85sxhqp
MD5

67272bdf9b8d38ee27ede57bef257400
SHA1

5547a87222800f91b8d1ca6d88f34abb966099d8
SHA256

f00d363d292d0e9500e055df0d1e95ecab1191070010a34b5a02eb3f5cf6f4b8
SHA512

041ecafa85349710230753ec135b4e30d3ee7feba2b2e686c4ef101846f0ecf59799b94ccd075be0a1c866404d0f527e97fa1e42da162f880cba648500efd1fa
SSDEEP

6144:BBPQHfeHLJDRO6t9RdRzySfBE8Vg9PxB7OniGWuO37yDe4/z:BcQD00Hya0PT7yijF7mBL

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  f00d363d292d0e9500e055df0d1e95ecab1191070010a34b5a02eb3f5cf6f4b8N
- Size
  
  326KB
- MD5
  
  67272bdf9b8d38ee27ede57bef257400
- SHA1
  
  5547a87222800f91b8d1ca6d88f34abb966099d8
- SHA256
  
  f00d363d292d0e9500e055df0d1e95ecab1191070010a34b5a02eb3f5cf6f4b8
- SHA512
  
  041ecafa85349710230753ec135b4e30d3ee7feba2b2e686c4ef101846f0ecf59799b94ccd075be0a1c866404d0f527e97fa1e42da162f880cba648500efd1fa
- SSDEEP
  
  6144:BBPQHfeHLJDRO6t9RdRzySfBE8Vg9PxB7OniGWuO37yDe4/z:BcQD00Hya0PT7yijF7mBL
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence