77eef7ddc2580e0ad42d64d7ca507263a18523cfaf739fece662131a94eb9aa1 | Triage

Sharing

General

Target

77eef7ddc2580e0ad42d64d7ca507263a18523cfaf739fece662131a94eb9aa1
Size

39KB
Sample

221128-f138yadb9y
MD5

ec97bc04d36e83ce5ed092bf156878f6
SHA1

e5fce1e8277db9dcf9f11559c0c165f0d3b124f8
SHA256

77eef7ddc2580e0ad42d64d7ca507263a18523cfaf739fece662131a94eb9aa1
SHA512

9852daca6286340ca4634a8f0a26a463415bfa81c3632de99894c8e8c340e3bdfcfa1ad5193246cfb31781bcf913a08f7b9d2f90863c1323f43761ef2b4a4a61
SSDEEP

768:k9Bn2RpxSECWHVYgnqk6i4WUGCmaflH6t8VHjVnb/0w:kDn23xSvAVznq9i4HGChY0jVnjD

Score

10^/10

evasion persistence trojan upx

Malware Config

Targets

- Target
  
  77eef7ddc2580e0ad42d64d7ca507263a18523cfaf739fece662131a94eb9aa1
- Size
  
  39KB
- MD5
  
  ec97bc04d36e83ce5ed092bf156878f6
- SHA1
  
  e5fce1e8277db9dcf9f11559c0c165f0d3b124f8
- SHA256
  
  77eef7ddc2580e0ad42d64d7ca507263a18523cfaf739fece662131a94eb9aa1
- SHA512
  
  9852daca6286340ca4634a8f0a26a463415bfa81c3632de99894c8e8c340e3bdfcfa1ad5193246cfb31781bcf913a08f7b9d2f90863c1323f43761ef2b4a4a61
- SSDEEP
  
  768:k9Bn2RpxSECWHVYgnqk6i4WUGCmaflH6t8VHjVnb/0w:kDn23xSvAVznq9i4HGChY0jVnjD
Score

10^/10

evasion persistence trojan
- Modifies WinLogon for persistence
  persistence
- UAC bypass
  evasion trojan
- Disables Task Manager via registry modification
  evasion
- Adds Run key to start application
  persistence
- Checks whether UAC is enabled
  evasion trojan
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Bypass User Account Control

Defense Evasion

Bypass User Account Control

Disabling Security Tools

Modify Registry

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan