fc855b6f23906d0743134442acbf1dffd1cab125fbcd9e3a075c674e956f4e7b | Triage

Sharing

General

Target

fc855b6f23906d0743134442acbf1dffd1cab125fbcd9e3a075c674e956f4e7b
Size

69KB
Sample

240417-hcr7waga37
MD5

b3568f1a119d93595b3e3948895460d3
SHA1

366551c31ff966aa3556764823190610b12360ee
SHA256

fc855b6f23906d0743134442acbf1dffd1cab125fbcd9e3a075c674e956f4e7b
SHA512

bca4f0377e473161bad7994595894118bda88ac67f1e2fb1da7a534c8601abc20a6d90c07cade309efeef192959c965197d8c641a724a43f89e6d58cbb043eaf
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8L:Olg35GTslA5t3/w8L

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  fc855b6f23906d0743134442acbf1dffd1cab125fbcd9e3a075c674e956f4e7b
- Size
  
  69KB
- MD5
  
  b3568f1a119d93595b3e3948895460d3
- SHA1
  
  366551c31ff966aa3556764823190610b12360ee
- SHA256
  
  fc855b6f23906d0743134442acbf1dffd1cab125fbcd9e3a075c674e956f4e7b
- SHA512
  
  bca4f0377e473161bad7994595894118bda88ac67f1e2fb1da7a534c8601abc20a6d90c07cade309efeef192959c965197d8c641a724a43f89e6d58cbb043eaf
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8L:Olg35GTslA5t3/w8L
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan