f3e26395b08f8d44925ae063774d88bb1697e05751cc26ff0fdac1b138012f17 | Triage

Sharing

General

Target

f3e26395b08f8d44925ae063774d88bb1697e05751cc26ff0fdac1b138012f17
Size

1.1MB
Sample

220520-2dyktsfbe6
MD5

3b6a6acc8be43200a1e3f5612fa43736
SHA1

2847fa25e2e412febf10a8be9f6ffcd41b9867cb
SHA256

f3e26395b08f8d44925ae063774d88bb1697e05751cc26ff0fdac1b138012f17
SHA512

a2eb74ea3f4805322b37aec5d81cf1bb84a5ad7cf54baa0690dda1cf6703cec964775b68148f67e2468688d09c34d9c90c96f00632bbd27c81f98c657629392e

Score

10^/10

evasion persistence trojan upx

Malware Config

Targets

- Target
  
  f3e26395b08f8d44925ae063774d88bb1697e05751cc26ff0fdac1b138012f17
- Size
  
  1.1MB
- MD5
  
  3b6a6acc8be43200a1e3f5612fa43736
- SHA1
  
  2847fa25e2e412febf10a8be9f6ffcd41b9867cb
- SHA256
  
  f3e26395b08f8d44925ae063774d88bb1697e05751cc26ff0fdac1b138012f17
- SHA512
  
  a2eb74ea3f4805322b37aec5d81cf1bb84a5ad7cf54baa0690dda1cf6703cec964775b68148f67e2468688d09c34d9c90c96f00632bbd27c81f98c657629392e
Score

10^/10

evasion persistence trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Winlogon Helper DLL

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan