05bf32b6fd32dc0a002fbf1e83f377fb111a6c3344f443a46356a99ab445d943 | Triage

Sharing

General

Target

05bf32b6fd32dc0a002fbf1e83f377fb111a6c3344f443a46356a99ab445d943
Size

92KB
Sample

241120-x5dbrawnen
MD5

ed317d16615ac60e7868ce0705d866ad
SHA1

40ac90b95ee6e58c74052b8a6b62550d04973ef3
SHA256

05bf32b6fd32dc0a002fbf1e83f377fb111a6c3344f443a46356a99ab445d943
SHA512

a14e924a7d530f3568a2cab6e5fe75efa90fc76accf79145701dfdcffbe393ee7ec2a697e04745eeecf5539f993823e6272e7766d83c621b3a1b8fad1b0f0084
SSDEEP

768:4zW4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAGr4PzpyRAJ7IwnDoSd7:41bC4Bk6lMTOWw4PkRAPok

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  05bf32b6fd32dc0a002fbf1e83f377fb111a6c3344f443a46356a99ab445d943
- Size
  
  92KB
- MD5
  
  ed317d16615ac60e7868ce0705d866ad
- SHA1
  
  40ac90b95ee6e58c74052b8a6b62550d04973ef3
- SHA256
  
  05bf32b6fd32dc0a002fbf1e83f377fb111a6c3344f443a46356a99ab445d943
- SHA512
  
  a14e924a7d530f3568a2cab6e5fe75efa90fc76accf79145701dfdcffbe393ee7ec2a697e04745eeecf5539f993823e6272e7766d83c621b3a1b8fad1b0f0084
- SSDEEP
  
  768:4zW4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAGr4PzpyRAJ7IwnDoSd7:41bC4Bk6lMTOWw4PkRAPok
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence