0e7c39e1a7e37a35b4d75d5a8404c9a8f3533a7afb546144b2ebdbd472b8da76 | Triage

Sharing

General

Target

0e7c39e1a7e37a35b4d75d5a8404c9a8f3533a7afb546144b2ebdbd472b8da76
Size

68KB
Sample

240305-wa9k2adg23
MD5

8f2f09d36b350673eec20e073ab01498
SHA1

4fc1cd712faf04af36bf00c0da81a97cf9360f90
SHA256

0e7c39e1a7e37a35b4d75d5a8404c9a8f3533a7afb546144b2ebdbd472b8da76
SHA512

faf6af33fa08c152212a7fb7a91e822c8e92bd6786184ada82644eaa53e96c0fbbe60b0076edfc5a80573b575f3e2505279edbaf818e95262dc66bde3f66079f
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Ne:Olg35GTslA5t3/w8Ne

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  0e7c39e1a7e37a35b4d75d5a8404c9a8f3533a7afb546144b2ebdbd472b8da76
- Size
  
  68KB
- MD5
  
  8f2f09d36b350673eec20e073ab01498
- SHA1
  
  4fc1cd712faf04af36bf00c0da81a97cf9360f90
- SHA256
  
  0e7c39e1a7e37a35b4d75d5a8404c9a8f3533a7afb546144b2ebdbd472b8da76
- SHA512
  
  faf6af33fa08c152212a7fb7a91e822c8e92bd6786184ada82644eaa53e96c0fbbe60b0076edfc5a80573b575f3e2505279edbaf818e95262dc66bde3f66079f
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Ne:Olg35GTslA5t3/w8Ne
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan