Overview

overview

10

Static

static

821bf9d923...0d.exe

windows7_x64

10

821bf9d923...0d.exe

windows10_x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    821bf9d9232b278bf09392b3dcee0466c034250eaacb820cee92dc54f758080d

  • Size

    128KB

  • Sample

    201018-g5cnb1cc9s

  • MD5

    a50da6451263aa74a68e4bda0b4e86fb

  • SHA1

    b4f44d10e7e981c24b267b029f7061613767b2c0

  • SHA256

    821bf9d9232b278bf09392b3dcee0466c034250eaacb820cee92dc54f758080d

  • SHA512

    87a563b351b320646c10e1081c83b9a9eba5046424cf3e6c3ffd8381550faa1004450633042541f52f38e3e7a58c0a0e08ac1551247940e29507378ae46e886a

Score
10/10
persistence

Malware Config

Targets

    • Target

      821bf9d9232b278bf09392b3dcee0466c034250eaacb820cee92dc54f758080d

    • Size

      128KB

    • MD5

      a50da6451263aa74a68e4bda0b4e86fb

    • SHA1

      b4f44d10e7e981c24b267b029f7061613767b2c0

    • SHA256

      821bf9d9232b278bf09392b3dcee0466c034250eaacb820cee92dc54f758080d

    • SHA512

      87a563b351b320646c10e1081c83b9a9eba5046424cf3e6c3ffd8381550faa1004450633042541f52f38e3e7a58c0a0e08ac1551247940e29507378ae46e886a

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks