08164d11272b096bc899edef80ab42b0b2bc05ab85a3ded4a3186fd9006226cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08164d11272b096bc899edef80ab42b0b2bc05ab85a3ded4a3186fd9006226cd
Size

69KB
Sample

240305-v1m92sdc55
MD5

8a26dba2945abf4eed2f13c3dbe00dc5
SHA1

91b079a95a645c45b92d05c85fcf8030fc209e68
SHA256

08164d11272b096bc899edef80ab42b0b2bc05ab85a3ded4a3186fd9006226cd
SHA512

501b3d38c81cfed020a8f5122329c089b28583ccac7a8e98b654a11511be941c47c7fe898b3cb452364916376195b177761ac5f876ac971bd1d735d5cf21921d
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8STT:Olg35GTslA5t3/w8IT

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  08164d11272b096bc899edef80ab42b0b2bc05ab85a3ded4a3186fd9006226cd
- Size
  
  69KB
- MD5
  
  8a26dba2945abf4eed2f13c3dbe00dc5
- SHA1
  
  91b079a95a645c45b92d05c85fcf8030fc209e68
- SHA256
  
  08164d11272b096bc899edef80ab42b0b2bc05ab85a3ded4a3186fd9006226cd
- SHA512
  
  501b3d38c81cfed020a8f5122329c089b28583ccac7a8e98b654a11511be941c47c7fe898b3cb452364916376195b177761ac5f876ac971bd1d735d5cf21921d
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8STT:Olg35GTslA5t3/w8IT
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan