936a35ca214e9be1438c67a1153c854c28054994ce43f1eed39bb9dc52cb54dd

Resubmissions

29-10-2021 14:51

211029-r8nn1aacaj 10

23-03-2021 18:12

210323-s8jdk5y98j 10

Sharing

Copy URL

Twitter E-mail

General

Target

936a35ca214e9be1438c67a1153c854c28054994ce43f1eed39bb9dc52cb54dd
Size

296KB
Sample

210323-s8jdk5y98j
MD5

6b2c7d5298c7fb8f4c4c3531894a91c1
SHA1

d7333af03603b27566ac8ab63d6aa21575e1ebb4
SHA256

936a35ca214e9be1438c67a1153c854c28054994ce43f1eed39bb9dc52cb54dd
SHA512

2555a572e9088ce58dce5bcaf1c0fca76727b6a1e1315ec0dbfe588a796faf1d083cb6ff3a6362f7c8075a4f321228c6227db7a3207fa557fff68e9fd4a3e114

Score

10^/10

Malware Config

Targets

- Target
  
  936a35ca214e9be1438c67a1153c854c28054994ce43f1eed39bb9dc52cb54dd
- Size
  
  296KB
- MD5
  
  6b2c7d5298c7fb8f4c4c3531894a91c1
- SHA1
  
  d7333af03603b27566ac8ab63d6aa21575e1ebb4
- SHA256
  
  936a35ca214e9be1438c67a1153c854c28054994ce43f1eed39bb9dc52cb54dd
- SHA512
  
  2555a572e9088ce58dce5bcaf1c0fca76727b6a1e1315ec0dbfe588a796faf1d083cb6ff3a6362f7c8075a4f321228c6227db7a3207fa557fff68e9fd4a3e114
Score

10^/10

evasion persistence trojan discovery
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Executes dropped EXE
- Modifies Windows Firewall
  evasion
- Loads dropped DLL
- Modifies file permissions
  discovery
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

T1031

Winlogon Helper DLL

T1004

Privilege Escalation

Defense Evasion

Disabling Security Tools

T1089

File and Directory Permissions Modification

T1222

Modify Registry

T1112

Credential Access

Discovery

Remote System Discovery

T1018

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Modifies Windows Defender Real-time Protection settings

Disables Task Manager via registry modification

Executes dropped EXE

Modifies Windows Firewall

Loads dropped DLL

Modifies file permissions

Windows security modification

Modifies WinLogon

MITRE ATT&CK Enterprise v6

Tasks

static1

behavioral1

behavioral2