9672d7d32f5753d7c583541c7eeff588a5e4bf97bb14d3f7219654729a5eabd7 | Triage

Sharing

General

Target

ac9dd0e71d4de4b712310fda60d34878
Size

35KB
Sample

240228-xnp9zsbe2v
MD5

ac9dd0e71d4de4b712310fda60d34878
SHA1

f366b7aeb05311c6a97f3b76a60d9c8a28978c6b
SHA256

9672d7d32f5753d7c583541c7eeff588a5e4bf97bb14d3f7219654729a5eabd7
SHA512

6c74bbfc6742f188160ecd8890bb16e3ad522f4503bdad087401cb9e548f5d4df01f4f9daca0dea3ec7753f4ef33168490e35410d6599a6d408c22340b16ab8a
SSDEEP

768:UdXk4UXIppezVGsSAZcMQdrPOFMDppIVXZhif:yXrUXILGVGEHQdrXD/8X

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  ac9dd0e71d4de4b712310fda60d34878
- Size
  
  35KB
- MD5
  
  ac9dd0e71d4de4b712310fda60d34878
- SHA1
  
  f366b7aeb05311c6a97f3b76a60d9c8a28978c6b
- SHA256
  
  9672d7d32f5753d7c583541c7eeff588a5e4bf97bb14d3f7219654729a5eabd7
- SHA512
  
  6c74bbfc6742f188160ecd8890bb16e3ad522f4503bdad087401cb9e548f5d4df01f4f9daca0dea3ec7753f4ef33168490e35410d6599a6d408c22340b16ab8a
- SSDEEP
  
  768:UdXk4UXIppezVGsSAZcMQdrPOFMDppIVXZhif:yXrUXILGVGEHQdrXD/8X
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Drops file in Drivers directory
- Modifies Windows Firewall
  evasion
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify System Firewall

Disable or Modify Tools

Modify Registry

Subvert Trust Controls

Install Root Certificate

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan