0689528a9dadc93a793a408ca3753075922a1100f925129815f630b33533c780 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0689528a9dadc93a793a408ca3753075922a1100f925129815f630b33533c780N
Size

149KB
Sample

241013-2j9kaasare
MD5

a9e66ada276b6718fbe86f4a6a591240
SHA1

b3ad4ea56e030986e2eae3f203a43630ae135fba
SHA256

0689528a9dadc93a793a408ca3753075922a1100f925129815f630b33533c780
SHA512

6c333e24da51f884bf4cf79f1262c2a51caf5e19ff551ce5754be7664d68939ad6154bd2ac2801a6b7df759cd045089d1e6002028bf8d5c7cea3f3d7701531c9
SSDEEP

3072:okvr5pkOOUYjo0i2JdvIArAVMBWfvgfJYraeL/qHQl:rrHkFo2JxeMw3g42HQl

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  0689528a9dadc93a793a408ca3753075922a1100f925129815f630b33533c780N
- Size
  
  149KB
- MD5
  
  a9e66ada276b6718fbe86f4a6a591240
- SHA1
  
  b3ad4ea56e030986e2eae3f203a43630ae135fba
- SHA256
  
  0689528a9dadc93a793a408ca3753075922a1100f925129815f630b33533c780
- SHA512
  
  6c333e24da51f884bf4cf79f1262c2a51caf5e19ff551ce5754be7664d68939ad6154bd2ac2801a6b7df759cd045089d1e6002028bf8d5c7cea3f3d7701531c9
- SSDEEP
  
  3072:okvr5pkOOUYjo0i2JdvIArAVMBWfvgfJYraeL/qHQl:rrHkFo2JxeMw3g42HQl
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence