7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351 | Triage

Sharing

General

Target

7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N
Size

164KB
Sample

241018-kvsmga1anj
MD5

3fe7c9f01e5585217ec6a5b9ea94ea90
SHA1

d139af1c8b537eb1f17fe1ec538fce0b09d3acb1
SHA256

7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351
SHA512

918ef7a9e7d48787340da9f908529252104a622ab3cff0538583501c2e8289d8a9dfe7e146b6117bd8e4fd3d0ec99fdf484eab15a80071e4e23384fae9f09e5b
SSDEEP

1536:uZJSmOK0Tn1EIIQoKkbsi2diCnGBY6nq9t6bLIZGwWuy6tU5t5918oJnp:uZJS7K0jsAIY6nCtY3wN1i6oJp

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351N
- Size
  
  164KB
- MD5
  
  3fe7c9f01e5585217ec6a5b9ea94ea90
- SHA1
  
  d139af1c8b537eb1f17fe1ec538fce0b09d3acb1
- SHA256
  
  7977e38fed339ab411d2b7924b49a2478987aade8d6fca6144d481c3a1591351
- SHA512
  
  918ef7a9e7d48787340da9f908529252104a622ab3cff0538583501c2e8289d8a9dfe7e146b6117bd8e4fd3d0ec99fdf484eab15a80071e4e23384fae9f09e5b
- SSDEEP
  
  1536:uZJSmOK0Tn1EIIQoKkbsi2diCnGBY6nq9t6bLIZGwWuy6tU5t5918oJnp:uZJS7K0jsAIY6nCtY3wN1i6oJp
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2