afae0686436f75c2ea13a85cb72ec01793f9a3667c1e7bb15acd6b0ab16d67d0 | Triage

Sharing

General

Target

afae0686436f75c2ea13a85cb72ec01793f9a3667c1e7bb15acd6b0ab16d67d0N
Size

899KB
Sample

240920-yqyjtavfpp
MD5

02a26d15ae6aff8d7fb582f01ebccc50
SHA1

212d05aaf1ebddc9deb62bfe3f21e6a66ba980d6
SHA256

afae0686436f75c2ea13a85cb72ec01793f9a3667c1e7bb15acd6b0ab16d67d0
SHA512

5e9f0639b73b8a30380f687ecdcb36696929e32a276ff0c49c07e299e80e963c41ddb3bd5b572afb70de6642d2e47c150655211409764b79840aff8bb5312bcf
SSDEEP

24576:eXLDCKSetietMdY8keERrO/wKIbHOBDDh:efvSYik+3ARrHKI2

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  afae0686436f75c2ea13a85cb72ec01793f9a3667c1e7bb15acd6b0ab16d67d0N
- Size
  
  899KB
- MD5
  
  02a26d15ae6aff8d7fb582f01ebccc50
- SHA1
  
  212d05aaf1ebddc9deb62bfe3f21e6a66ba980d6
- SHA256
  
  afae0686436f75c2ea13a85cb72ec01793f9a3667c1e7bb15acd6b0ab16d67d0
- SHA512
  
  5e9f0639b73b8a30380f687ecdcb36696929e32a276ff0c49c07e299e80e963c41ddb3bd5b572afb70de6642d2e47c150655211409764b79840aff8bb5312bcf
- SSDEEP
  
  24576:eXLDCKSetietMdY8keERrO/wKIbHOBDDh:efvSYik+3ARrHKI2
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence