bbc3ed8d731bd0ea61e7ce1b097b9b41e636c251f25d477188d20ba95976d7b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bbc3ed8d731bd0ea61e7ce1b097b9b41e636c251f25d477188d20ba95976d7b2
Size

68KB
Sample

240425-c3jersea7x
MD5

8b9858b095f9ef406119a3afad36bc15
SHA1

73275717847dc9f27c55d5b5746d4d0b81dd7752
SHA256

bbc3ed8d731bd0ea61e7ce1b097b9b41e636c251f25d477188d20ba95976d7b2
SHA512

8774cb94c32816eb86472c38f10efd8350569d8fb35231ffd1796e1073c92d1e7faf03dc4816fa09f3d452be45bc651948cd7515b30d32b5828180af831b4dee
SSDEEP

1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8d:Olg35GTslA5t3/w8d

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  bbc3ed8d731bd0ea61e7ce1b097b9b41e636c251f25d477188d20ba95976d7b2
- Size
  
  68KB
- MD5
  
  8b9858b095f9ef406119a3afad36bc15
- SHA1
  
  73275717847dc9f27c55d5b5746d4d0b81dd7752
- SHA256
  
  bbc3ed8d731bd0ea61e7ce1b097b9b41e636c251f25d477188d20ba95976d7b2
- SHA512
  
  8774cb94c32816eb86472c38f10efd8350569d8fb35231ffd1796e1073c92d1e7faf03dc4816fa09f3d452be45bc651948cd7515b30d32b5828180af831b4dee
- SSDEEP
  
  1536:1teqKDlXvCDB04f5Gn/L8FlADNt3d1Hw8d:Olg35GTslA5t3/w8d
Score

10^/10

evasion persistence trojan
- Windows security bypass
  evasion trojan
- Modifies Installed Components in the registry
  persistence
- Sets file execution options in registry
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Windows security modification
  evasion trojan
- Modifies WinLogon
  persistence
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Winlogon Helper DLL

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan