Overview

overview

10

Static

static

b2097005e9...c6.exe

windows7_x64

3

b2097005e9...c6.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2097005e9acb8c20765cd74080713d30175b8a859a1db51b56f3fe4f38fc5c6

  • Size

    191KB

  • Sample

    201004-c3y6j2sy66

  • MD5

    77b0bb6da287fce8e8e0f7a6cecf19e1

  • SHA1

    979007ae0a74b0d1191ccf035e3ef4c861dded55

  • SHA256

    b2097005e9acb8c20765cd74080713d30175b8a859a1db51b56f3fe4f38fc5c6

  • SHA512

    73f36543994ef369754d290622997270c619d699b420c660744d68f84518ee5dd6c094496e7c0cf11f6cff111e763cbfd827f1fbfe4ccc1273317992f60467a5

Score
10/10
persistence

Malware Config

Targets

    • Target

      b2097005e9acb8c20765cd74080713d30175b8a859a1db51b56f3fe4f38fc5c6

    • Size

      191KB

    • MD5

      77b0bb6da287fce8e8e0f7a6cecf19e1

    • SHA1

      979007ae0a74b0d1191ccf035e3ef4c861dded55

    • SHA256

      b2097005e9acb8c20765cd74080713d30175b8a859a1db51b56f3fe4f38fc5c6

    • SHA512

      73f36543994ef369754d290622997270c619d699b420c660744d68f84518ee5dd6c094496e7c0cf11f6cff111e763cbfd827f1fbfe4ccc1273317992f60467a5

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks