e0846185cdd663294246c03ef52b5aade2ecbf3835650a3d619c72185aea16b9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0846185cdd663294246c03ef52b5aade2ecbf3835650a3d619c72185aea16b9
Size

69KB
Sample

240312-dfy3daed2t
MD5

459dc69af42280412294da12dedacd68
SHA1

06f9138fa9f708184104d025da71df51b7c072e6
SHA256

e0846185cdd663294246c03ef52b5aade2ecbf3835650a3d619c72185aea16b9
SHA512

628259619e5872db29592fa11b563cc171d33fc6b055c8fca23dae6b53796c1ed045f041719319c5dd54bdf2d25dc3a6a13432f81d1d00cdd53ecb819dfe3502
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Z:Olg35GTslA5t3/w8Z

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  e0846185cdd663294246c03ef52b5aade2ecbf3835650a3d619c72185aea16b9
- Size
  
  69KB
- MD5
  
  459dc69af42280412294da12dedacd68
- SHA1
  
  06f9138fa9f708184104d025da71df51b7c072e6
- SHA256
  
  e0846185cdd663294246c03ef52b5aade2ecbf3835650a3d619c72185aea16b9
- SHA512
  
  628259619e5872db29592fa11b563cc171d33fc6b055c8fca23dae6b53796c1ed045f041719319c5dd54bdf2d25dc3a6a13432f81d1d00cdd53ecb819dfe3502
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8Z:Olg35GTslA5t3/w8Z
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan