Overview

overview

10

Static

static

67334c1b7f...e7.exe

windows7_x64

3

67334c1b7f...e7.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    67334c1b7f629c04efefbfb466e5996a425af4a43c07a5ce51d4f142222b0de7

  • Size

    588KB

  • Sample

    210509-mmmnv1j8ra

  • MD5

    ac514dce9416eb9e4148431016629174

  • SHA1

    b0e1d96605cdc3da995a667a1fdc7189b67bfdcd

  • SHA256

    67334c1b7f629c04efefbfb466e5996a425af4a43c07a5ce51d4f142222b0de7

  • SHA512

    8c485630cae11e23c5eb790aa061681fe161ea390e07731ea7742a9f029806f43eb432eb08af280b301e889a6b4932ae6c6b436b8d78afb333e5cf0ba8e8907a

Score
10/10
persistence

Malware Config

Targets

    • Target

      67334c1b7f629c04efefbfb466e5996a425af4a43c07a5ce51d4f142222b0de7

    • Size

      588KB

    • MD5

      ac514dce9416eb9e4148431016629174

    • SHA1

      b0e1d96605cdc3da995a667a1fdc7189b67bfdcd

    • SHA256

      67334c1b7f629c04efefbfb466e5996a425af4a43c07a5ce51d4f142222b0de7

    • SHA512

      8c485630cae11e23c5eb790aa061681fe161ea390e07731ea7742a9f029806f43eb432eb08af280b301e889a6b4932ae6c6b436b8d78afb333e5cf0ba8e8907a

    Score
    10/10
    persistence

    • Modifies WinLogon for persistence

      persistence

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

1
T1004

Privilege Escalation

Defense Evasion

Modify Registry

1
T1112

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks