ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN
Size

1.9MB
Sample

240928-e36amszbpg
MD5

c1e0e97861866fcfbd0161f6bd3983e0
SHA1

bc2213de0a066ce83e860f6611140e33858ae487
SHA256

ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453f
SHA512

5305ed72ed5c4919947cd05619eba62611e6cbe045eb62cb89676d4b588476b56cc184d41bab80bec5526a1d2864608616424a6ff24fe979d7ee4887ef82dee8
SSDEEP

24576:luHcSjySebnZgqJAj9uhRKFiIhDbHpjyAwI+w3mqvYHpFxHv8s54YvYrjXrGO:lkP+BZnrhEkIDjP5B2qvypX0sZveXrP

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453fN
- Size
  
  1.9MB
- MD5
  
  c1e0e97861866fcfbd0161f6bd3983e0
- SHA1
  
  bc2213de0a066ce83e860f6611140e33858ae487
- SHA256
  
  ba55afab9af16d19b4bdd1ac697c32d7e99569ab20bec5d106e549d4ec9b453f
- SHA512
  
  5305ed72ed5c4919947cd05619eba62611e6cbe045eb62cb89676d4b588476b56cc184d41bab80bec5526a1d2864608616424a6ff24fe979d7ee4887ef82dee8
- SSDEEP
  
  24576:luHcSjySebnZgqJAj9uhRKFiIhDbHpjyAwI+w3mqvYHpFxHv8s54YvYrjXrGO:lkP+BZnrhEkIDjP5B2qvypX0sZveXrP
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence