95d637e784b5bce698c65f24ca10b7e1220ff8a81a73ce0de2606fcb343d9349 | Triage

Sharing

General

Target

95d637e784b5bce698c65f24ca10b7e1220ff8a81a73ce0de2606fcb343d9349
Size

92KB
Sample

241122-clqshsskgv
MD5

2656fc71b8f507a31285b5f7e07116a5
SHA1

adbd1035d29cb431c716f4ce6be7dc121382bedc
SHA256

95d637e784b5bce698c65f24ca10b7e1220ff8a81a73ce0de2606fcb343d9349
SHA512

e41a3c9bd33d5bd9c87c0c63f56f888c73a4684f9cebaa5dbaf2f7bd9043d5298a76c1c4e7c4cfbcc955f7e8eb1044860cd23a41ec2eb100304b60184f63be21
SSDEEP

768:4zW4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAGr4PzpyRAJ7IwnDoSdV:41bC4Bk6lMTOWw4PkRAPog

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  95d637e784b5bce698c65f24ca10b7e1220ff8a81a73ce0de2606fcb343d9349
- Size
  
  92KB
- MD5
  
  2656fc71b8f507a31285b5f7e07116a5
- SHA1
  
  adbd1035d29cb431c716f4ce6be7dc121382bedc
- SHA256
  
  95d637e784b5bce698c65f24ca10b7e1220ff8a81a73ce0de2606fcb343d9349
- SHA512
  
  e41a3c9bd33d5bd9c87c0c63f56f888c73a4684f9cebaa5dbaf2f7bd9043d5298a76c1c4e7c4cfbcc955f7e8eb1044860cd23a41ec2eb100304b60184f63be21
- SSDEEP
  
  768:4zW4wnebSdDlmkok6lRGXu+jKZAOWjpiRHVAGr4PzpyRAJ7IwnDoSdV:41bC4Bk6lMTOWw4PkRAPog
Score

10^/10

discovery persistence
- Modifies WinLogon for persistence
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Modifies system executable filetype association
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Privilege Escalation

Boot or Logon Autostart Execution

Winlogon Helper DLL

Event Triggered Execution

Change Default File Association

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence