e26856ee8c058fbed5b35acadc7bfbe61a4bdc7b24c3e9c944adb4f953f5a109 | Triage

Sharing

General

Target

308d3dda1ab8a16b017aa6813053b3b2
Size

78KB
Sample

231225-vxwf9afbb4
MD5

308d3dda1ab8a16b017aa6813053b3b2
SHA1

2599fb3bf0ae87bd9cbbe5d41dd5d55d10ac8390
SHA256

e26856ee8c058fbed5b35acadc7bfbe61a4bdc7b24c3e9c944adb4f953f5a109
SHA512

f97deea82dad7625a118d7bd4506282b74735f6f994ec05b2f896bd867da21ed92795dc13f2add01675ace92a01ec38eda4127e5621717707c051bf06b07835f
SSDEEP

1536:WdgF3iGc0QU87VeQ5hButGvwo/UQ4Z2ZlrS:vF3iGc0QUg32Gvj/UQ4ZqlrS

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  308d3dda1ab8a16b017aa6813053b3b2
- Size
  
  78KB
- MD5
  
  308d3dda1ab8a16b017aa6813053b3b2
- SHA1
  
  2599fb3bf0ae87bd9cbbe5d41dd5d55d10ac8390
- SHA256
  
  e26856ee8c058fbed5b35acadc7bfbe61a4bdc7b24c3e9c944adb4f953f5a109
- SHA512
  
  f97deea82dad7625a118d7bd4506282b74735f6f994ec05b2f896bd867da21ed92795dc13f2add01675ace92a01ec38eda4127e5621717707c051bf06b07835f
- SSDEEP
  
  1536:WdgF3iGc0QU87VeQ5hButGvwo/UQ4Z2ZlrS:vF3iGc0QUg32Gvj/UQ4ZqlrS
Score

10^/10

evasion persistence trojan
- Modifies firewall policy service
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan