3133774f81b2ebd58279cad69210295a9ad12e757d078dd2734e9c241f9e7a16 | Triage

Sharing

General

Target

3133774f81b2ebd58279cad69210295a9ad12e757d078dd2734e9c241f9e7a16
Size

350KB
Sample

240920-x817zstfrl
MD5

fb0cc0909058659349180cfd92fe1323
SHA1

d8954e8c280db8466f1ffdf1977c389429258f0d
SHA256

3133774f81b2ebd58279cad69210295a9ad12e757d078dd2734e9c241f9e7a16
SHA512

c319b557ee1fefdc9726e920ada272062e761fe885f69386f551155fbe96535f64710dc3fdcaead5cf7edbf0461c3cfa7e4531961aafbf975ab514d8484d9ae3
SSDEEP

6144:gVTQySiuxLxeHs/4UvcZSeNH4ikRo6S5W3v71TLnOxV8SyuiNu:2SiieHs/KeoHkzxOxqSyj

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  3133774f81b2ebd58279cad69210295a9ad12e757d078dd2734e9c241f9e7a16
- Size
  
  350KB
- MD5
  
  fb0cc0909058659349180cfd92fe1323
- SHA1
  
  d8954e8c280db8466f1ffdf1977c389429258f0d
- SHA256
  
  3133774f81b2ebd58279cad69210295a9ad12e757d078dd2734e9c241f9e7a16
- SHA512
  
  c319b557ee1fefdc9726e920ada272062e761fe885f69386f551155fbe96535f64710dc3fdcaead5cf7edbf0461c3cfa7e4531961aafbf975ab514d8484d9ae3
- SSDEEP
  
  6144:gVTQySiuxLxeHs/4UvcZSeNH4ikRo6S5W3v71TLnOxV8SyuiNu:2SiieHs/KeoHkzxOxqSyj
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence