5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd | Triage

Sharing

General

Target

5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
Size

277KB
Sample

220731-zem5dagebk
MD5

7abb61412a064ced52fb6174352501d8
SHA1

51b2967bcbfb38ab1059eadf275b64fe9e0eedeb
SHA256

5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
SHA512

1ec6410bd09c081b6df36d27f101fcb60b870014fff09e2b3dd62107b5e2fa4f5cdb6213f5413d72abbdcc511f9b952229b39c5c5d9cc43b9625c485ecdee018

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
- Size
  
  277KB
- MD5
  
  7abb61412a064ced52fb6174352501d8
- SHA1
  
  51b2967bcbfb38ab1059eadf275b64fe9e0eedeb
- SHA256
  
  5e53e3b297d0bb71ccd27f879a4452489befd413d695c3007972015539020acd
- SHA512
  
  1ec6410bd09c081b6df36d27f101fcb60b870014fff09e2b3dd62107b5e2fa4f5cdb6213f5413d72abbdcc511f9b952229b39c5c5d9cc43b9625c485ecdee018
Score

10^/10

evasion persistence trojan
- Modifies Windows Defender Real-time Protection settings
  evasion trojan
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Modify Existing Service

Registry Run Keys / Startup Folder

Privilege Escalation

Defense Evasion

Disabling Security Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan