cd891a2e5a3c4d8b5c879ca51f682e1dc4a691890ab772d60b91e626ceb8518d | Triage

Sharing

General

Target

cd891a2e5a3c4d8b5c879ca51f682e1dc4a691890ab772d60b91e626ceb8518d
Size

70KB
Sample

240306-bnz9asgb22
MD5

c65f9cdeeb848f06a6a22ad00199a412
SHA1

b0487c2793aa496bcd6d47d4996798b9567c0822
SHA256

cd891a2e5a3c4d8b5c879ca51f682e1dc4a691890ab772d60b91e626ceb8518d
SHA512

626b9286af80c661270885cc69b7b5e437b5dd78d32ca928d195de183e3fde4ca7f7422b38e323ec4a03c1bdf72feb0aeac1ca48af4a2354daef9d74a33c036c
SSDEEP

1536:xuBPdTu5bkUNdMc/XPaNzodFEegkO+XM+u:gBPdqRpMcX8zGEeO+XM+u

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  cd891a2e5a3c4d8b5c879ca51f682e1dc4a691890ab772d60b91e626ceb8518d
- Size
  
  70KB
- MD5
  
  c65f9cdeeb848f06a6a22ad00199a412
- SHA1
  
  b0487c2793aa496bcd6d47d4996798b9567c0822
- SHA256
  
  cd891a2e5a3c4d8b5c879ca51f682e1dc4a691890ab772d60b91e626ceb8518d
- SHA512
  
  626b9286af80c661270885cc69b7b5e437b5dd78d32ca928d195de183e3fde4ca7f7422b38e323ec4a03c1bdf72feb0aeac1ca48af4a2354daef9d74a33c036c
- SSDEEP
  
  1536:xuBPdTu5bkUNdMc/XPaNzodFEegkO+XM+u:gBPdqRpMcX8zGEeO+XM+u
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan