99c140f3dbd18b65457bc398730516f3a8c1d0e5ba68aa46c194505bf0f12a98 | Triage

Sharing

General

Target

99c140f3dbd18b65457bc398730516f3a8c1d0e5ba68aa46c194505bf0f12a98
Size

84KB
Sample

240430-kbxgbagf3v
MD5

36010b83bccfcd1032971df9fc5082a1
SHA1

9967b83065e3ad82cd6c0c3b02cf08ab707fde3e
SHA256

99c140f3dbd18b65457bc398730516f3a8c1d0e5ba68aa46c194505bf0f12a98
SHA512

c8008923315d86c06b57e47d9bf81cec47cda0dec6d9f8aa57d7b4c57c7138997486a6f60eb0015bc99755afeb3d943bc8d9ba83dbb8c9219fa4990296de1def
SSDEEP

1536:gEKh/S0Fmav8242worjs0nGxMvrEl3/AEHK:bKlWOpsG8MviYEHK

Score

10^/10

evasion persistence trojan

Malware Config

Targets

- Target
  
  99c140f3dbd18b65457bc398730516f3a8c1d0e5ba68aa46c194505bf0f12a98
- Size
  
  84KB
- MD5
  
  36010b83bccfcd1032971df9fc5082a1
- SHA1
  
  9967b83065e3ad82cd6c0c3b02cf08ab707fde3e
- SHA256
  
  99c140f3dbd18b65457bc398730516f3a8c1d0e5ba68aa46c194505bf0f12a98
- SHA512
  
  c8008923315d86c06b57e47d9bf81cec47cda0dec6d9f8aa57d7b4c57c7138997486a6f60eb0015bc99755afeb3d943bc8d9ba83dbb8c9219fa4990296de1def
- SSDEEP
  
  1536:gEKh/S0Fmav8242worjs0nGxMvrEl3/AEHK:bKlWOpsG8MviYEHK
Score

10^/10

evasion persistence trojan
- Modifies security service
  evasion
- Windows security bypass
  evasion trojan
- Executes dropped EXE
- Windows security modification
  evasion trojan
- Adds Run key to start application
  persistence
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Create or Modify System Process

Windows Service

Defense Evasion

Impair Defenses

Disable or Modify Tools

Modify Registry

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

evasionpersistencetrojan

behavioral2

evasionpersistencetrojan