d4ed87dd1c7afc62a1725b6fe79d4727f31eaa1969462fd00527410222f0a02a | Triage

Sharing

General

Target

d4ed87dd1c7afc62a1725b6fe79d4727f31eaa1969462fd00527410222f0a02aN
Size

1.3MB
Sample

240920-g2ccaashjj
MD5

e1731afa2b8650d308d1ddb2a18b8730
SHA1

294df903102cb2eeed4698b5d114a348cb3238db
SHA256

d4ed87dd1c7afc62a1725b6fe79d4727f31eaa1969462fd00527410222f0a02a
SHA512

49b4ca85e2ef5d5ba7ad9946e1b1fc415477ca659b7f5bb6ed57059386e8141829fa0f11e111f31a92a6caa129ff88075439ea61a4d8426cbfa5561e3389378b
SSDEEP

1536:eXTSHQ+AWwXpPhttof1zwQVgv/qflVkSkwNegiYaZR:ejG4pPhLo1zwLv/2IfwNeginR

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  d4ed87dd1c7afc62a1725b6fe79d4727f31eaa1969462fd00527410222f0a02aN
- Size
  
  1.3MB
- MD5
  
  e1731afa2b8650d308d1ddb2a18b8730
- SHA1
  
  294df903102cb2eeed4698b5d114a348cb3238db
- SHA256
  
  d4ed87dd1c7afc62a1725b6fe79d4727f31eaa1969462fd00527410222f0a02a
- SHA512
  
  49b4ca85e2ef5d5ba7ad9946e1b1fc415477ca659b7f5bb6ed57059386e8141829fa0f11e111f31a92a6caa129ff88075439ea61a4d8426cbfa5561e3389378b
- SSDEEP
  
  1536:eXTSHQ+AWwXpPhttof1zwQVgv/qflVkSkwNegiYaZR:ejG4pPhLo1zwLv/2IfwNeginR
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence