a3c062f646957fa6a85795d486b0dd744c3389bcb683caa60ba33f556adf027b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3c062f646957fa6a85795d486b0dd744c3389bcb683caa60ba33f556adf027b
Size

69KB
Sample

240420-bcxzssda6w
MD5

e224bb2c288bc89f04f1413c12349a21
SHA1

573e3e18507da0a9224c327de1e19f8acccfaa0e
SHA256

a3c062f646957fa6a85795d486b0dd744c3389bcb683caa60ba33f556adf027b
SHA512

40120f8ac7771c94710734d3cffe6fe15be0a9f7b0ac8f5e4de7146ea84fe0d7edab1408045f0f4ca9a170a5199d7475eb0e699c2b2130f8ca93a9f81a803829
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JR:Olg35GTslA5t3/w8JR

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  a3c062f646957fa6a85795d486b0dd744c3389bcb683caa60ba33f556adf027b
- Size
  
  69KB
- MD5
  
  e224bb2c288bc89f04f1413c12349a21
- SHA1
  
  573e3e18507da0a9224c327de1e19f8acccfaa0e
- SHA256
  
  a3c062f646957fa6a85795d486b0dd744c3389bcb683caa60ba33f556adf027b
- SHA512
  
  40120f8ac7771c94710734d3cffe6fe15be0a9f7b0ac8f5e4de7146ea84fe0d7edab1408045f0f4ca9a170a5199d7475eb0e699c2b2130f8ca93a9f81a803829
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8JR:Olg35GTslA5t3/w8JR
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan