1eaedd86fbcb8a9c954f2506e4b39c8c3a0131d3da44369a9188d16985babf58 | Triage

Sharing

General

Target

548231a9467187c76fc6538c09d182de
Size

43KB
Sample

240111-zav97aghc9
MD5

548231a9467187c76fc6538c09d182de
SHA1

8e550ab8b6d377b27bdcc4123736aff3693e8a87
SHA256

1eaedd86fbcb8a9c954f2506e4b39c8c3a0131d3da44369a9188d16985babf58
SHA512

68d485425cbf4721c205f9b810dba8b6ca64feec8b8c66f089331680eea4769aa547876461288040b2252f4c84046c9503d7434b1487745ecd1e944661fd268c
SSDEEP

768:+IgjbXdxAf+jua33sfIgxoSazgPyP4BACPDpD3wdA+VH1Bxk8IaCeudnv8gzMcl8:HB01eyP4BACPN3wdnxk8HuBvh5h6

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  548231a9467187c76fc6538c09d182de
- Size
  
  43KB
- MD5
  
  548231a9467187c76fc6538c09d182de
- SHA1
  
  8e550ab8b6d377b27bdcc4123736aff3693e8a87
- SHA256
  
  1eaedd86fbcb8a9c954f2506e4b39c8c3a0131d3da44369a9188d16985babf58
- SHA512
  
  68d485425cbf4721c205f9b810dba8b6ca64feec8b8c66f089331680eea4769aa547876461288040b2252f4c84046c9503d7434b1487745ecd1e944661fd268c
- SSDEEP
  
  768:+IgjbXdxAf+jua33sfIgxoSazgPyP4BACPDpD3wdA+VH1Bxk8IaCeudnv8gzMcl8:HB01eyP4BACPN3wdnxk8HuBvh5h6
Score

10^/10

evasion persistence trojan
- Modifies firewall policy service
  evasion
- Windows security bypass
  evasion trojan
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan