Overview

overview

10

Static

static

05a75635bc...39.exe

windows7_x64

3

05a75635bc...39.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    05a75635bc6db83ea1ecce6c0572e829db450fbffaae71ed74c51ac867ac2339

  • Size

    125KB

  • Sample

    201018-c81ddkkk96

  • MD5

    2cdbb7e6a0eb5bbd90012e21dd65c318

  • SHA1

    6c201e6cd2c23409dd041cffdaba41cc52a1bc7f

  • SHA256

    05a75635bc6db83ea1ecce6c0572e829db450fbffaae71ed74c51ac867ac2339

  • SHA512

    0efe295878636b8872f296ee2cec6ac4f43cf74a59e8d02d06a5e3cdc1b2c4c0118d0cb2dd0a88d070ec79945f694caa98eb1b14df75e25556f60b631cf3e25f

Score
10/10
persistence

Malware Config

Targets

    • Target

      05a75635bc6db83ea1ecce6c0572e829db450fbffaae71ed74c51ac867ac2339

    • Size

      125KB

    • MD5

      2cdbb7e6a0eb5bbd90012e21dd65c318

    • SHA1

      6c201e6cd2c23409dd041cffdaba41cc52a1bc7f

    • SHA256

      05a75635bc6db83ea1ecce6c0572e829db450fbffaae71ed74c51ac867ac2339

    • SHA512

      0efe295878636b8872f296ee2cec6ac4f43cf74a59e8d02d06a5e3cdc1b2c4c0118d0cb2dd0a88d070ec79945f694caa98eb1b14df75e25556f60b631cf3e25f

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks